#22 - Add permission handling

app/Http/Middleware/EnsurePermissionsAreGiven.php

@@ -0,0 +1,24 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Middleware;
+
+use App\Services\PermissionService;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsurePermissionsAreGiven
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        $organizationId = intval($request->organizationId);
+
+        if ((new PermissionService())->checkGitHubAppInstallation($organizationId) === false) {
+            return redirect("/");
+        }
+
+        return $next($request);
+    }
+}

app/Services/PermissionService.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Services;
+
+use Illuminate\Support\Facades\Http;
+
+class PermissionService
+{
+    public function checkGitHubAppInstallation(int $organizationId): bool
+    {
+        $permissionsGiven = false;
+
+        $response = Http::withHeaders([
+            "Authorization" => "Bearer " . auth()->user()->github_token,
+        ])->get("https://api.github.com/user/orgs");
+
+        if ($response->json() !== null) {
+            foreach ($response->json() as $organization) {
+                if ($organization["id"] === $organizationId) {
+                    $permissionsGiven = true;
+
+                    break;
+                }
+            }
+        }
+
+        return $permissionsGiven;
+    }
+}

bootstrap/app.php

@@ -2,6 +2,7 @@
 
 declare(strict_types=1);
 
+use App\Http\Middleware\EnsurePermissionsAreGiven;
 use Illuminate\Foundation\Application;
 use Illuminate\Foundation\Configuration\Exceptions;
 use Illuminate\Foundation\Configuration\Middleware;
@@ -13,6 +14,9 @@
         health: "/up",
     )
     ->withMiddleware(function (Middleware $middleware): void {
+        $middleware->alias([
+            "permissions" => EnsurePermissionsAreGiven::class,
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
     })->create();

config/services.php

@@ -21,5 +21,6 @@
         "client_id" => env("GITHUB_CLIENT_ID"),
         "client_secret" => env("GITHUB_CLIENT_SECRET"),
         "redirect" => env("GITHUB_REDIRECT_URL"),
+        "app_id" => 918356,
     ],
 ];