Files
backend/app/Http/Middleware/EnsureApiUser.php
T
2026-06-28 12:29:53 +02:00

31 lines
670 B
PHP

<?php
namespace App\Http\Middleware;
use App\Models\User;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class EnsureApiUser
{
public function handle(Request $request, Closure $next): Response
{
$user = $request->user();
if (! $user instanceof User) {
return response()->json([
'message' => 'Authentification utilisateur requise.',
], 401);
}
if (! $user->is_active) {
return response()->json([
'message' => 'Compte utilisateur désactivé.',
], 403);
}
return $next($request);
}
}