CheckLoggedIntoActivityForType.php

Go to the documentation of this file.

<?php

namespace BristolSU\Support\Authorization\Middleware;

use BristolSU\Support\Authentication\Contracts\Authentication;
use BristolSU\Support\Authorization\Exception\ActivityRequiresGroup;
use BristolSU\Support\Authorization\Exception\ActivityRequiresParticipant;
use BristolSU\Support\Authorization\Exception\ActivityRequiresRole;
use BristolSU\Support\Authorization\Exception\ActivityRequiresUser;
use Closure;
use Illuminate\Http\Request;

class CheckLoggedIntoActivityForType
{
    private $authentication;

    public function __construct(Authentication $authentication)
    {
        $this->authentication = $authentication;
    }

    public function handle(Request $request, Closure $next)
    {
        $activity = $request->route('activity_slug');
        if ($activity->activity_for === 'user' && $this->authentication->getUser() === null) {
            throw new ActivityRequiresUser(
                'Activity requires a user to be logged in,', 403, null, $activity
            );
        }
        if ($activity->activity_for === 'group' && $this->authentication->getGroup() === null) {
            throw new ActivityRequiresGroup(                
                'Activity requires a group to be logged in,', 403, null, $activity
            );
        }
        if ($activity->activity_for === 'role' && $this->authentication->getRole() === null) {
            throw new ActivityRequiresRole(                
                'Activity requires a role to be logged in,', 403, null, $activity
            );
        }
        return $next($request);
    }
}