dev-think-one / laravel-release-protection

src/Http/Middleware/VerifyFirstPartyClientIp.php

<?php


namespace ReleaseProtection\Http\Middleware;

use Closure;

class VerifyFirstPartyClientIp
{

    /**
     * Handle an incoming request.
     *
     * @param \Illuminate\Http\Request $request
     * @param Closure $next
     * @param string $type
     *
     * @return mixed
     */
    public function handle($request, Closure $next, $type = 'default')
    {
        $allowIPs = config('release-protection.ip.ips.' . $type, config('release-protection.ip.ips.default'));
        if (
            app()->environment(

The method environment() does not exist on Illuminate\Container\Container. Are you sure you never get this type here, but always one of the subclasses?

                config('release-protection.ip.envs.' . $type, config('release-protection.ip.envs.default'))
            ) &&
            !in_array($request->ip(), $allowIPs)
        ) {
            abort(
                config('release-protection.ip.status.restricted.' . $type, config('release-protection.ip.status.restricted.default')),
                __(config('release-protection.ip.msg.restricted.' . $type, config('release-protection.ip.msg.restricted.default')))

It seems like __(config('release-protection.ip.msg.restricted.' . $type, config('release-protection.ip.msg.restricted.default'))) can also be of type array; however, parameter $message of abort() does only seem to accept string, maybe add an additional type check?

            );
        }

        return $next($request);
    }
}