AdminMiddleware.php
43 lines
| 1 | <?php |
| 2 | |
| 3 | /** |
| 4 | * Middleware to ensure the user is authenticated. |
| 5 | * Blocks access to routes unless the user is logged in. |
| 6 | * |
| 7 | * @package Framework |
| 8 | * @subpackage Middlewares |
| 9 | * @since 1.0.0 |
| 10 | */ |
| 11 | namespace Kirki\Framework\Middlewares; |
| 12 | |
| 13 | \defined('ABSPATH') || exit; |
| 14 | use Kirki\Framework\Contracts\Middleware; |
| 15 | use Kirki\Framework\Contracts\Request; |
| 16 | use Kirki\Framework\Exceptions\AuthorizationException; |
| 17 | use Kirki\Framework\Http\Response; |
| 18 | use Kirki\Framework\Wordpress\Constants\Capabilities; |
| 19 | use function Kirki\Framework\message; |
| 20 | class AdminMiddleware implements Middleware |
| 21 | { |
| 22 | /** |
| 23 | * Handle the incoming request and determine if the user is authenticated and has admin privileges. |
| 24 | * |
| 25 | * @param Request $request The incoming request instance. |
| 26 | * @param callable $next The next middleware callback. |
| 27 | * |
| 28 | * @return mixed The result of the next middleware or a response. |
| 29 | * |
| 30 | * @throws AuthorizationException |
| 31 | * |
| 32 | * @since 1.0.0 |
| 33 | */ |
| 34 | public function handle(Request $request, callable $next) |
| 35 | { |
| 36 | if (is_user_logged_in() && current_user_can(Capabilities::MANAGE_OPTIONS)) { |
| 37 | $request->from_admin_middleware = 'from_admin_middleware'; |
| 38 | return $next($request); |
| 39 | } |
| 40 | throw new AuthorizationException(message('auth.admin_required'), Response::FORBIDDEN); |
| 41 | } |
| 42 | } |
| 43 |