Werk365\JwtAuthRoles\Middlewares\RoleMiddleware::handle()

Complexity

Conditions	3
Paths	4

Size

Total Lines	13
Code Lines	8

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function handle($request, Closure $next, $role)
    {
        $roles = is_array($role)
            ? $role
            : explode('|', $role);
        $user_roles = array_map('strtolower', Auth::user()->roles);

Accessing roles on the interface Illuminate\Contracts\Auth\Authenticatable suggest that you code against a concrete implementation. How about adding an instanceof check?

        $same = (array_intersect($roles, $user_roles));

        if (empty($same)) {
            throw AuthException::auth('401', 'User does not have right roles');
        }

        return $next($request);
    }