authUser ?? null; if (!$user || ($user['role'] ?? '') !== 'admin') { throw new HttpResponseException(json([ 'code' => 1, 'message' => '无管理员权限', 'data' => null, ], 403)); } return $next($request); } }