API Feature (#334)

app/Http/Middleware/Authenticate.php

@@ -12,6 +12,6 @@ class Authenticate extends Middleware
      */
     protected function redirectTo(Request $request): ?string
     {
-        return $request->expectsJson() ? null : route('login');
+        return $request->expectsJson() ? null : url('/');
     }
 }

app/Http/Middleware/CanSeeProjectMiddleware.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Models\Project;
+use App\Models\User;
+use Closure;
+use Illuminate\Http\Request;
+
+class CanSeeProjectMiddleware
+{
+    public function handle(Request $request, Closure $next)
+    {
+        /** @var User $user */
+        $user = $request->user();
+
+        /** @var Project $project */
+        $project = $request->route('project');
+
+        if (! $user->can('view', $project)) {
+            abort(403, 'You do not have permission to view this project.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/HasProjectMiddleware.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Models\User;
+use Closure;
+use Illuminate\Http\Request;
+
+class HasProjectMiddleware
+{
+    public function handle(Request $request, Closure $next)
+    {
+        /** @var ?User $user */
+        $user = $request->user();
+        if (! $user) {
+            return $next($request);
+        }
+
+        if (! $user->currentProject) {
+            if ($user->allProjects()->count() > 0) {
+                $user->current_project_id = $user->projects->first()->id;
+                $user->save();
+
+                return $next($request);
+            }
+
+            abort(403, 'You must have a project to access the panel.');
+        }
+
+        return $next($request);
+    }
+}