laravel - Laravel Vapor - 允许未经身份验证的用户执行上传

Question

默认情况下，Laravel Vapor 要求用户通过身份验证才能执行上传。我需要允许未经身份验证的执行上传。我怎样才能做到这一点？

谢谢

标签： laravellaravel-vapor

Answer 1

我们通过覆盖默认vapor/signed-storage-url路由的处理来处理这个问题。

在routes/web.php.

Route::post('vapor/signed-storage-url', [Controllers\SignedStorageUrlController::class, 'store']);

在我们的SignedStorageUrlController中，我们使用store删除了此检查的函数：

Gate::authorize('uploadFiles', [
    $request->user(),
    $bucket = $request->input('bucket') ?: $_ENV['AWS_BUCKET'],
]);

导致：

<?php

namespace App\Http\Controllers;

use Illuminate\Support\Str;
use Illuminate\Http\Request;
use Laravel\Vapor\Http\Controllers\SignedStorageUrlController as VaporSignedStorageUrlController;

class SignedStorageUrlController extends VaporSignedStorageUrlController
{
    public function store(Request $request)
    {
        $this->ensureEnvironmentVariablesAreAvailable($request);

        $bucket = $request->input('bucket') ?: $_ENV['AWS_BUCKET'];

        $client = $this->storageClient();

        $uuid = (string) Str::uuid();

        $signedRequest = $client->createPresignedRequest(
            $this->createCommand($request, $client, $bucket, $key = ('tmp/'.$uuid)),
            '+5 minutes'
        );

        $uri = $signedRequest->getUri();

        return response()->json([
            'uuid' => $uuid,
            'bucket' => $bucket,
            'key' => $key,
            'url' => 'https://'.$uri->getHost().$uri->getPath().'?'.$uri->getQuery(),
            'headers' => $this->headers($request, $signedRequest),
        ], 201);
    }
}