MIF_E31211871/Laravel/app/Http/Middleware/ApiKetAuthenticate.php

40 lines
876 B
PHP

<?php
namespace App\Http\Middleware;
use App\Models\User;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class ApiKetAuthenticate
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next): Response
{
$token = $request->bearerToken();
$user = User::where('token', $token)->first();
if (isset($user)) {
if ($user->id_role == 1 || $user->id_role == 2) {
return $next($request);
}
}
return response()->json(
[
'code' => 401,
'message' => 'Unauthorized',
'status' => false
],
401
);
}
}