CheckActivityFor.php

Go to the documentation of this file.

<?php

namespace BristolSU\Support\Authorization\Middleware;

use BristolSU\Support\Authentication\Contracts\Authentication;
use BristolSU\Support\Authorization\Exception\ActivityRequiresParticipant;
use BristolSU\Support\Logic\Facade\LogicTester;
use Closure;
use Illuminate\Http\Request;

class CheckActivityFor
{
    private $authentication;

    public function __construct(Authentication $authentication)
    {
        $this->authentication = $authentication;
    }

    public function handle(Request $request, Closure $next)
    {
        $activity = $request->route('activity_slug');
        $logic = $activity->forLogic;
        if (!LogicTester::evaluate($logic, $this->authentication->getUser(), $this->authentication->getGroup(), $this->authentication->getRole())) {
            throw ActivityRequiresParticipant::createWithActivity($activity, 'You do not have access to this activity,', 403);
        }
        return $next($request);
    }
}