Rinvex\Oauth\Http\Middleware\CheckScopes

Complexity

Total Complexity

5

Size/Duplication

Total Lines	28
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	3

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	handle()	0	14	5

<?php

declare(strict_types=1);

namespace Rinvex\Oauth\Http\Middleware;

use Illuminate\Auth\AuthenticationException;
use Rinvex\Oauth\Exceptions\MissingScopeException;

class CheckScopes
{
    /**
     * Handle the incoming request.
     *
     * @param \Illuminate\Http\Request $request
     * @param \Closure                 $next
     * @param mixed                    ...$scopes
     *
     * @throws \Illuminate\Auth\AuthenticationException|\Rinvex\Oauth\Exceptions\MissingScopeException
     *
     * @return \Illuminate\Http\Response
     */

Consider making the type for parameter $scopes a bit more specific; maybe use array.

    public function handle($request, $next, ...$scopes)
    {
        if (! $request->user() || ! $request->user()->token()) {
            throw new AuthenticationException();
        }

        foreach ($scopes as $scope) {
            if (! $request->user()->token()->abilities->map->getRouteKey()->contains($scope)) {
                throw new MissingScopeException($scope);
            }
        }

        return $next($request);
    }
}