CheckDatabaseUserOwnsControlUser.php

Go to the documentation of this file.

<?php

namespace BristolSU\Support\Authorization\Middleware;

use BristolSU\Support\Authentication\Contracts\Authentication;
use BristolSU\Support\Authorization\Exception\IncorrectLogin;
use BristolSU\Support\User\Contracts\UserAuthentication;
use Closure;
use Illuminate\Auth\AuthenticationException;
use Illuminate\Http\Request;
use Illuminate\Validation\UnauthorizedException;

class CheckDatabaseUserOwnsControlUser
{

    private $userAuthentication;

    private $authentication;

    public function __construct(UserAuthentication $userAuthentication, Authentication $authentication)
    {
        $this->userAuthentication = $userAuthentication;
        $this->authentication = $authentication;
    }

    public function handle(Request $request, \Closure $next)
    {
        if ($this->hasUsers() && !$this->usersAreEqual()) {
            throw new IncorrectLogin('Logged into incorrect user');
        }

        return $next($request);
    }

    private function hasUsers(): bool
    {
        return $this->userAuthentication->getUser() !== null && $this->authentication->getUser() !== null;
    }

    private function usersAreEqual(): bool
    {
        return $this->userAuthentication->getUser()->controlUser()->id() === $this->authentication->getUser()->id();
    }
}