Differential D2428 Diff 6805 src/app/Http/Middleware/AuthenticateReseller.php

Changeset View

Standalone View

				<?php

				namespace App\Http\Middleware;

				use Closure;

				class AuthenticateReseller
				{
				/**
				* Handle an incoming request.
				*
				* @param \Illuminate\Http\Request $request
				* @param \Closure $next
				* @return mixed
				*/
				public function handle($request, Closure $next)
				{
				$user = auth()->user();

				if (!$user) {
				abort(403, "Unauthorized");
				}

				if ($user->role !== "reseller") {
				abort(403, "Unauthorized");
				}

				if ($user->tenant_id != \config('app.tenant_id')) {
				abort(403, "Unauthorized");
				}

				return $next($request);
				}
				}