App\Http\Middleware\ForceUpdate

Complexity

Total Complexity

6

Size/Duplication

Total Lines	28
Duplicated Lines	0 %

Importance

Changes	2
Bugs	2	Features	0

1 Method

Rating	Name	Duplication	Size	Complexity
A	handle()	0	20	6

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Request;

class ForceUpdate
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if (Request::isMethod('post')) {
            return $next($request);
        }

        // if the current user has a forceupdate field set, we check that they can only access this route or a lower forceupdate step

        if (backpack_user() != null) {
            if (backpack_user()->isStudent()) {

The method isStudent() does not exist on Illuminate\Contracts\Auth\Authenticatable. It seems like you code against a sub-type of Illuminate\Contracts\Auth\Authenticatable such as Illuminate\Foundation\Auth\User.

                if (backpack_user()->student->force_update) {

Accessing student on the interface Illuminate\Contracts\Auth\Authenticatable suggest that you code against a concrete implementation. How about adding an instanceof check?

                    // if the user wants to go further than authorized, redirect them to the current step
                    if ($request->path() != 'edit/'.backpack_user()->student->force_update) {
                        return redirect(url('edit/'.backpack_user()->student->force_update));
                    }
                }
            }
        }

        return $next($request);
    }
}