Jaga-Jalan/app/Http/Middleware/SuperAdminMiddleware.php

46 lines
1.4 KiB
PHP

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
class SuperAdminMiddleware
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle(Request $request, Closure $next)
{
// Check if user is authenticated
if (!Auth::guard('web')->check()) {
if ($request->ajax() || $request->wantsJson()) {
return response()->json([
'success' => false,
'message' => 'Unauthorized. Silakan login terlebih dahulu.'
], 401);
}
return redirect()->route('login');
}
// Check if user is super admin
$user = Auth::guard('web')->user();
if ($user && $user->tipe_pengguna !== 'super admin') {
if ($request->ajax() || $request->wantsJson()) {
return response()->json([
'success' => false,
'message' => 'Unauthorized. Hanya Super Admin yang dapat mengakses fitur ini.'
], 403);
}
return redirect()->route('dashboard')
->with('error', 'Anda tidak memiliki akses ke halaman tersebut.');
}
return $next($request);
}
}