<?php

namespace App\Http\Middleware;

use App\Models\User;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;

class RoleAPIMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next, $permission)
    {
        $user = User::where('user_unique_id', $request->user_unique_id)->first();

        if (!$user->can($permission)) {
            if ($user->hasRole('superadmin')) {
            } else {
                return response()->json([
                    'status' => 0,
                    'success' => false,
                    'message' => 'You dont have permission to access.'
                ], 200);
            }
        }
        return $next($request);
    }
}