SlayerBirden\DataFlowServer\Domain\Middleware\ValidateOwnerMiddleware::process()

Complexity

Conditions	5
Paths	3

Size

Total Lines	20
Code Lines	12

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	7
CRAP Score	6.2017

Importance

Changes

0

<?php
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        $resource = $request->getAttribute(ResourceMiddlewareInterface::DATA_RESOURCE);

        if ($resource && $resource instanceof ClaimedResourceInterface) {
            $resourceOwner = $resource->getOwner();
            /** @var User|null $currentOwner */
            $currentOwner = $request->getAttribute(TokenMiddleware::USER_PARAM);

            if (!$currentOwner || ($currentOwner->getId() !== $resourceOwner->getId())) {
                return new JsonResponse([
                    'data' => [],
                    'msg' => new DangerMessage('Access denied.'),
                    'success' => false
                ], 403);
            }
        }

        return $handler->handle($request);
    }
}