MIF_31230115/manajemen_mp/app/Http/Middleware/CheckRole.php

48 lines
1.4 KiB
PHP

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Symfony\Component\HttpFoundation\Response;
class CheckRole
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next, ...$roles): Response
{
// 1. Pastikan user sudah login
if (!Auth::check()) {
return redirect()->route('login');
}
$user = Auth::user();
$namaRole = null;
// 2. Ambil nama_role dari relasi.
if ($user->role) {
$namaRole = $user->role->nama_role;
} elseif ($user->anggota && $user->anggota->role) {
$namaRole = $user->anggota->role->nama_role;
}
// ==========================================
// LETAKKAN KODE DD DI SINI (UNTUK DEBUGGING)
// ==========================================
// dd('Role di DB: ' . $namaRole, 'Role di Rute: ', $roles);
// 3. Cek apakah nama_role user ada di dalam daftar role
if (in_array($namaRole, $roles)) {
return $next($request);
}
// 4. Jika role tidak cocok, tolak akses
abort(403, 'Akses Ditolak. Anda tidak memiliki wewenang untuk mengakses halaman ini.');
}
}