Aceptar multiples roles en el middleware de roles

2021-07-20 00:45:53 -04:00
parent 7fa39a8b11
commit e6ad8af661
2 changed files with 18 additions and 10 deletions
--- a/backend/app/Http/Middleware/RoleMiddleware.php
+++ b/backend/app/Http/Middleware/RoleMiddleware.php
@@ -6,8 +6,16 @@ use Closure;
 use App\Exceptions\NotAuthorizedException;

 class RoleMiddleware {
-    public function handle($request, Closure $next, $role) {
-        if(!$request->user->hasRole($role)) {
+    public function handle($request, Closure $next, $raw_roles) {
+        $user = $request->user;
+        $roles = explode('|', $raw_roles);
+        $has_permission = false;
+
+        foreach($roles as $role){
+            $has_permission = $has_permission || $user->hasRole($role);
+        }
+
+        if(!$has_permission) {
            throw new NotAuthorizedException($request->user);
        }