26 lines
674 B
PHP
26 lines
674 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Middlewares;
|
|
|
|
use App\Core\Request;
|
|
use App\Core\Response;
|
|
|
|
final class RoleGuard
|
|
{
|
|
/** @param list<string> $allowedRoles */
|
|
public static function requireAny(Request $request, Response $response, array $allowedRoles): void
|
|
{
|
|
$role = $request->role;
|
|
if ($role === null || !in_array($role, $allowedRoles, true)) {
|
|
$response->status(403)->json([
|
|
'status' => 'error',
|
|
'error' => 'Forbidden',
|
|
'message' => 'لا تملك الصلاحية اللازمة لتنفيذ هذه العملية.',
|
|
]);
|
|
exit;
|
|
}
|
|
}
|
|
}
|