#22 - Add permission handling

.env.example

@@ -73,3 +73,5 @@ DOCKER_HOST_USER_ID=1000
 GITHUB_CLIENT_ID=
 GITHUB_CLIENT_SECRET=
 GITHUB_REDIRECT_URL=
+GITHUB_APP_ID=918356
+GITHUB_APP_URL=https://github.com/apps/gha-analyzer

app/Http/Middleware/EnsurePermissionsAreGiven.php

@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Middleware;
+
+use App\Services\PermissionService;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsurePermissionsAreGiven
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ((new PermissionService())->checkPermissions() === false) {
+            return redirect(env("GITHUB_APP_URL"));
+        }
+
+        return $next($request);
+    }
+}

app/Services/PermissionService.php

@@ -0,0 +1,31 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Services;
+
+use Illuminate\Support\Facades\Http;
+
+class PermissionService
+{
+    public function checkPermissions(): bool
+    {
+        $permissions_given = false;
+
+        $response = Http::withHeaders([
+            "Authorization" => "Bearer " . auth()->user()->github_token,
+        ])->get("https://api.github.com/user/installations");
+
+        if ($response->json("installations") !== null) {
+            foreach ($response->json("installations") as $installation) {
+                if ($installation["app_id"] === intval(env("GITHUB_APP_ID"))) {
+                    $permissions_given = true;
+
+                    break;
+                }
+            }
+        }
+
+        return $permissions_given;
+    }
+}