mirror of
https://github.com/dyzulk/trustlab-api.git
synced 2026-01-26 05:15:35 +07:00
fix: make role checks case-insensitive and clean up middleware
This commit is contained in:
@@ -16,10 +16,7 @@ class AdminMiddleware
|
||||
public function handle(Request $request, Closure $next): Response
|
||||
{
|
||||
if (!$request->user() || !$request->user()->isAdminOrOwner()) {
|
||||
$role = $request->user() ? $request->user()->role : 'guest';
|
||||
return response()->json([
|
||||
'message' => "Unauthorized. Admin access required. (Current role: {$role})"
|
||||
], 403);
|
||||
return response()->json(['message' => 'Unauthorized. Admin access required.'], 403);
|
||||
}
|
||||
|
||||
return $next($request);
|
||||
|
||||
Reference in New Issue
Block a user