Spekkionu\ZendAcl\AclMiddleware

Complexity

Total Complexity

10

Size/Duplication

Total Lines	83
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Test Coverage

Coverage

96.15%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
A	handle()	0	12	4
A	notAllowed()	0	19	5

<?php

namespace Spekkionu\ZendAcl;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Contracts\Auth\Guard;
use Illuminate\Contracts\Config\Repository as Config;
use Laminas\Permissions\Acl\Acl;

class AclMiddleware
{

	/**
     * The Guard implementation.
     *
     * @var Guard
     */
    protected $auth;

    /**
     * The Acl implementation.
     *
     * @var Acl
     */
    protected $acl;

    /**
     * The Config implementation.
     *
     * @var Config
     */
    protected $config;

    /**
     * Create a new filter instance.
     *
     * @param  Guard  $auth
     */
    public function __construct(Guard $auth, Acl $acl, Config $config)
    {
        $this->auth = $auth;
        $this->acl = $acl;
        $this->config = $config;
    }

    /**
     * Run the request filter.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next, $resource = null, $permission = null)
    {
        if ($this->auth->guest()) {
            if (!$this->acl->isAllowed('guest', $resource, $permission)) {
                return $this->notAllowed($request);
            }
        } elseif (!$this->acl->isAllowed($this->auth->user(), $resource, $permission)) {

It seems like $this->auth->user() targeting Illuminate\Contracts\Auth\Guard::user() can also be of type object<Illuminate\Contracts\Auth\Authenticatable>; however, Laminas\Permissions\Acl\Acl::isAllowed() does only seem to accept object<Laminas\Permissions\Acl\Role\RoleInterface>|string|null, maybe add an additional type check?

            return $this->notAllowed($request);
        }

        return $next($request);
    }

    /**
     * Processes not allowed response
     *
     * @param Request $request
     *
     * @return \Illuminate\Http\Response
     */
    protected function notAllowed(Request $request)
    {
        if ($request->ajax()) {
            return response('Unauthorized.', 401);
        } else {
            $action = $this->config->get('zendacl.action', 'redirect');
            if ($action == 'redirect') {
                $url = $this->config->get('zendacl.redirect', 'auth/login');
                return redirect($url);
            } elseif ($action == 'route') {
                $route = $this->config->get('zendacl.redirect');
                return redirect()->route($route);
            } elseif ($action == 'view') {
                $view = $this->config->get('zendacl.view', 'zendacl::unauthorized');
                return view($view);
            }
        }

    }
}