Enea\Authorization\Middleware\AuthorizerMiddleware

Complexity

Total Complexity

5

Size/Duplication

Total Lines	31
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	isAuthorizedRequestFor()	0	4	2
A	handle()	0	11	2

<?php

declare(strict_types=1);

/**
 * Created on 10/03/18 by enea dhack.
 */

namespace Enea\Authorization\Middleware;

use Closure;
use Enea\Authorization\Authorizer;
use Enea\Authorization\Contracts\GrantableOwner;
use Enea\Authorization\Events\UnauthorizedOwner;
use Enea\Authorization\Exceptions\UnauthorizedOwnerException;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Events\Dispatcher;
use Illuminate\Http\Request;

abstract class AuthorizerMiddleware
{
    protected $authorizer;

    private $event;

    public function __construct(Authorizer $authorizer, Dispatcher $event)
    {
        $this->authorizer = $authorizer;
        $this->event = $event;
    }

    abstract protected function authorized(GrantableOwner $owner, array $grantables): bool;

    public function handle(Request $request, Closure $next, string ...$grantables)
    {
        $authenticated = $request->user();

        if ($this->isAuthorizedRequestFor($authenticated)($grantables)) {
            return $next($request);
        }

        $this->event->dispatch(new UnauthorizedOwner($authenticated, $grantables));

        throw new UnauthorizedOwnerException($authenticated);
    }

    private function isAuthorizedRequestFor(Model $authenticated): Closure
    {
        return function (array $grantables) use ($authenticated): bool {
            return $authenticated instanceof GrantableOwner && $this->authorized($authenticated, $grantables);
        };
    }
}