Middleware & Routes

Middleware aliases (đã đăng ký)

Alias Class Cách dùng
role RoleMiddleware middleware('role:admin')
permission PermissionMiddleware middleware('permission:company.view')
role_or_permission RoleOrPermissionMiddleware middleware('role_or_permission:admin,company.create')

Route structure: routes/api.php

/api/employee/register     [POST]   Public
/api/employee/login        [POST]   Public
/api/employee/profile      [GET]    auth:employee
/api/employee/logout       [GET]    auth:employee

/api/department/all        [GET]    auth:employee + permission:department.view
/api/department/{id}       [GET]    auth:employee + permission:department.view
/api/department/create     [POST]   auth:employee + permission:department.create
/api/department/update/{id}[PUT]    auth:employee + permission:department.update
/api/department/delete/{id}[DELETE] auth:employee + permission:department.delete

/api/company/all           [GET]    auth:employee + permission:company.view
/api/company/{id}          [GET]    auth:employee + permission:company.view
/api/company/create        [POST]   auth:employee + permission:company.create
/api/company/update/{id}   [PUT]    auth:employee + permission:company.update
/api/company/delete/{id}   [DELETE] auth:employee + permission:company.delete

/api/branch/all            [GET]    auth:employee + permission:branch.view
/api/branch/{id}           [GET]    auth:employee + permission:branch.view
/api/branch/create         [POST]   auth:employee + permission:branch.create
/api/branch/update/{id}    [PUT]    auth:employee + permission:branch.update
/api/branch/delete/{id}    [DELETE] auth:employee + permission:branch.delete

Thay đổi so với trước

Trước đây Hiện tại
Company routes public (không auth) Company routes yêu cầu auth:employee
Không có permission check ở route Có permission middleware cho từng endpoint
Branch routes không tồn tại Branch routes đầy đủ CRUD
Department chỉ có auth:employee Department có thêm permission middleware
← Migrations Seeders →