z1haze\Acl\Middleware\HasPermission

Complexity

Total Complexity

11

Size/Duplication

Total Lines	73
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Test Coverage

Coverage

0%

Importance

Changes	2
Bugs	0	Features	0

<?php namespace z1haze\Acl\Middleware;
class HasPermission
{
    protected $request;

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $this->request = $request;

        if (
            ($this->getAction('level') && $this->hasLevel()) ||
            ($this->getAction('permission') && $this->hasPermissionTo())
        ) {
            return $next($this->request);
        }

        if ($this->request->isJson() || $this->request->wantsJson()) {
            return response()->json([
                'error' => [
                    'status_code' => 401,
                    'code' => 'INSUFFICIENT_PERMISSIONS',
                    'description' => 'Unauthorized.'
                ],
            ], 401);
        }

        return abort(401, 'Unauthorized');
    }

    /**
     * Check if user has requested route level.
     *
     * @return bool
     */
    protected function hasLevel()
    {
        $level = $this->getAction('level');

        return $this->request->user()->hasLevel($level);
    }

    /**
     * Check if user has requested route permissions.
     *
     * @return bool
     */
    protected function hasPermissionTo()
    {
        $permission = $this->getAction('permission');

        return $this->request->user()->hasPermissionTo($permission);
    }

    /**
     * Extract required action from requested route.
     *
     * @param string $key action name
     * @return string
     */
    protected function getAction($key)
    {
        $action = $this->request->route()->getAction();

        return isset($action[$key]) ? $action[$key] : false;
    }

}