Thinktomorrow\Chief\App\Http\Middleware\ChiefValidateInvite::handle()

Complexity

Conditions	6
Paths	5

Size

Total Lines	20
Code Lines	8

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	9
CRAP Score	6

Importance

Changes

0

<?php
    public function handle($request, Closure $next)
    {
        // Verifies a valid signature and still outside expiration period
        if (! $request->hasValidSignature()) {
            return redirect()->route('invite.expired');
        }

        if (! $invitation = Invitation::findByToken($request->token)) {
            return redirect()->route('invite.expired');
        }

        if (in_array($invitation->state(), [InvitationState::ACCEPTED, InvitationState::REVOKED])) {

            // We allow the user to pass if the invitee is already logged in. Otherwise the invite link cannot be reused.
            if (! auth()->guard('chief')->check() || ! auth()->guard('chief')->user()->is($invitation->invitee)) {
                return redirect()->route('invite.expired');
            }
        }

        return $next($request);
    }