[13.x] Add Authorize controller middleware attribute (#59048)

* Add Authorize controller middleware attribute

* formatting

---------

Co-authored-by: Taylor Otwell <taylor@laravel.com>

Author: JurianArie

src/Illuminate/Routing/Attributes/Controllers/Authorize.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace Illuminate\Routing\Attributes\Controllers;
+
+use Attribute;
+use Illuminate\Auth\Middleware\Authorize as AuthorizeMiddleware;
+use Illuminate\Support\Arr;
+use UnitEnum;
+
+#[Attribute(Attribute::TARGET_CLASS | Attribute::TARGET_METHOD | Attribute::IS_REPEATABLE)]
+class Authorize extends Middleware
+{
+    /**
+     * @param  array<string>|string|null  $models
+     */
+    public function __construct(
+        UnitEnum|string $ability,
+        array|string|null $models = null,
+        ?array $only = null,
+        ?array $except = null,
+    ) {
+        $middleware = AuthorizeMiddleware::using($ability, ...Arr::wrap($models));
+
+        parent::__construct($middleware, $only, $except);
+    }
+}

tests/Integration/Routing/AuthorizeMiddlewareAttributeTest.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace Illuminate\Tests\Integration\Routing;
+
+use Illuminate\Routing\Attributes\Controllers\Authorize;
+use Illuminate\Support\Facades\Route;
+use Orchestra\Testbench\TestCase;
+
+class AuthorizeMiddlewareAttributeTest extends TestCase
+{
+    public function test_attribute_is_respected(): void
+    {
+        $route = Route::get('/', [AuthorizeMiddlewareAttributeController::class, 'index']);
+        $this->assertEquals([
+            'Illuminate\Auth\Middleware\Authorize:all',
+            'Illuminate\Auth\Middleware\Authorize:only-index,a',
+            'Illuminate\Auth\Middleware\Authorize:also-index',
+        ], $route->controllerMiddleware());
+
+        $route = Route::get('/', [AuthorizeMiddlewareAttributeController::class, 'show']);
+        $this->assertEquals([
+            'Illuminate\Auth\Middleware\Authorize:all',
+            'Illuminate\Auth\Middleware\Authorize:except-index,a,b',
+        ], $route->controllerMiddleware());
+    }
+}
+
+#[Authorize('all')]
+#[Authorize('only-index', 'a', only: ['index'])]
+#[Authorize('except-index', ['a', 'b'], except: ['index'])]
+class AuthorizeMiddlewareAttributeController
+{
+    #[Authorize('also-index')]
+    public function index(): void
+    {
+        // ...
+    }
+
+    public function show(): void
+    {
+        // ...
+    }
+}