59 lines
1.6 KiB
PHP
59 lines
1.6 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use App\Models\Tenant;
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class CreditCheckMiddleware
|
|
{
|
|
public function handle(Request $request, Closure $next): Response
|
|
{
|
|
$tenant = $request->attributes->get('tenant');
|
|
if (! $tenant instanceof Tenant) {
|
|
$tenant = $this->resolveTenant($request);
|
|
$request->attributes->set('tenant', $tenant);
|
|
$request->attributes->set('tenant_id', $tenant->id);
|
|
$request->merge([
|
|
'tenant' => $tenant,
|
|
'tenant_id' => $tenant->id,
|
|
]);
|
|
}
|
|
|
|
if ($this->requiresCredits($request) && !$tenant->canCreateEvent()) {
|
|
return response()->json([
|
|
'error' => 'No available package for creating events. Please purchase a package.',
|
|
], 402);
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
|
|
private function requiresCredits(Request $request): bool
|
|
{
|
|
return $request->isMethod('post')
|
|
&& $request->routeIs('api.v1.tenant.events.store');
|
|
}
|
|
|
|
private function resolveTenant(Request $request): Tenant
|
|
{
|
|
$user = $request->user();
|
|
if ($user && isset($user->tenant) && $user->tenant instanceof Tenant) {
|
|
return $user->tenant;
|
|
}
|
|
|
|
$tenantId = $request->attributes->get('tenant_id');
|
|
if (! $tenantId && $user && isset($user->tenant_id)) {
|
|
$tenantId = $user->tenant_id;
|
|
}
|
|
|
|
if (! $tenantId) {
|
|
abort(401, 'Unauthenticated');
|
|
}
|
|
|
|
return Tenant::findOrFail($tenantId);
|
|
}
|
|
}
|