初始化

app/Http/Middleware/Can.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+/**
+ * 权限点门禁：can:articles.moderate
+ * 传入多个权限点时，拥有任一即通过（OR 语义）。
+ */
+class Can
+{
+    public function handle(Request $request, Closure $next, string ...$permissions): Response
+    {
+        $user = $request->user();
+
+        if (! $user) {
+            abort(403, '需要登录');
+        }
+
+        foreach ($permissions as $permission) {
+            if ($user->canPerm($permission)) {
+                return $next($request);
+            }
+        }
+
+        abort(403, '无访问权限');
+    }
+}