aiblog/app/Http/Middleware/AdminMiddleware.php
2024-11-17 11:30:01 +08:00

23 lines
No EOL
501 B
PHP

<?php
declare(strict_types=1);
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class AdminMiddleware
{
public function handle(Request $request, Closure $next): Response
{
if (! $request->user() || ! $request->user()->isAdmin()) {
return response()->json([
'message' => 'Unauthorized. Admin access required.',
], 403);
}
return $next($request);
}
}