<?php

namespace App\Http\Middleware;

use App\Komma\Users\Models\Role;
use Closure;
use Illuminate\Contracts\Auth\Guard;

/**
 * Class PreventCustomersReachingBackend
 *
 * Prevents customers from reaching the kms.
 * If they try they will be redirected to /
 *
 * @package App\Http\Middleware
 */
class PreventCustomersReachingBackend
{
    /**
     * The Guard implementation.
     *
     * @var Guard
     */
    protected $auth;

    /**
     * Create a new filter instance.
     *
     * @param  Guard  $auth
     * @return void
     */
    public function __construct(Guard $auth)
    {
        $this->auth = $auth;
    }

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if ($this->auth->check()) {
            $pathParts = explode('/', $request->path()); //Path example: "kms/users"
            if(reset($pathParts) == 'kms' && !$this->auth->user()->role->isAtLeast(Role::Admin))
                return redirect()->to('/');
            //TODO GO TO UNAUTHORIZED PAGE
        }

        return $next($request);
    }
}