NIM_E31222534/app/Http/Middleware/AdminMiddleware.php

27 lines
682 B
PHP

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class AdminMiddleware
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next): Response
{
if (!$request->user() || $request->user()->role !== 'admin') {
return response()->json([
'status' => 'error',
'message' => 'Anda tidak memiliki akses untuk fitur ini',
], 403);
}
return $next($request);
}
}