Admin middleware

Author: tarikulwebx

README.md

@@ -62,8 +62,10 @@ public function update(Request $request, string $id)
     /**
      * Remove the specified resource from storage.
      */
-    public function destroy(string $id)
+    public function destroy(User $user)
     {
-        //
+        $user->delete();
+
+        return redirect()->route('users.index')->with('success', 'User deleted successfully');
     }
 }

app/Http/Controllers/UserController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class AdminMiddleware
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->user()->role !== 'admin') {
+            abort(403, 'Unauthorized action.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/AdminMiddleware.php

@@ -17,6 +17,7 @@ public function toArray(Request $request): array
         return [
             'id' => $this->id,
             'avatar' => $this->avatar,
+            'role' => $this->role,
             'name' => $this->name,
             'email' => $this->email,
             'email_verified_at' => $this->email_verified_at,

app/Http/Resources/UserResource.php

@@ -1,5 +1,6 @@
 <?php
 
+use App\Http\Middleware\AdminMiddleware;
 use App\Http\Middleware\HandleAppearance;
 use App\Http\Middleware\HandleInertiaRequests;
 use Illuminate\Foundation\Application;
@@ -9,8 +10,8 @@
 
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
-        web: __DIR__.'/../routes/web.php',
-        commands: __DIR__.'/../routes/console.php',
+        web: __DIR__ . '/../routes/web.php',
+        commands: __DIR__ . '/../routes/console.php',
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware) {
@@ -21,6 +22,10 @@
             HandleInertiaRequests::class,
             AddLinkHeadersForPreloadedAssets::class,
         ]);
+
+        $middleware->alias([
+            'admin' => AdminMiddleware::class,
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions) {
         //

bootstrap/app.php

@@ -19,6 +19,15 @@ public function run(): void
             'email'             => 'admin@test.com',
             'password'          => Hash::make('password'),
             'email_verified_at' => now(),
+            'role'              => 'admin',
+        ]);
+
+        User::factory()->create([
+            'name'              => 'User',
+            'email'             => 'user@test.com',
+            'password'          => Hash::make('password'),
+            'email_verified_at' => now(),
+            'role'              => 'user',
         ]);
     }
 }

database/seeders/UserSeeder.php

@@ -4,7 +4,7 @@ import { NavUser } from '@/components/nav-user';
 import { Sidebar, SidebarContent, SidebarFooter, SidebarHeader, SidebarMenu, SidebarMenuButton, SidebarMenuItem } from '@/components/ui/sidebar';
 import { type NavItem } from '@/types';
 import { Link } from '@inertiajs/react';
-import { BookOpen, Folder, LayoutGrid, Mail, Users } from 'lucide-react';
+import { BookOpen, Github, LayoutGrid, Mail, Users } from 'lucide-react';
 import AppLogo from './app-logo';
 
 const mainNavItems: NavItem[] = [
@@ -17,23 +17,25 @@ const mainNavItems: NavItem[] = [
         title: 'Users',
         href: '/users',
         icon: Users,
+        requiresAdmin: true,
     },
     {
         title: 'Invitations',
         href: '/invitations',
         icon: Mail,
+        requiresAdmin: true,
     },
 ];
 
 const footerNavItems: NavItem[] = [
     {
         title: 'Repository',
-        href: 'https://github.com/laravel/react-starter-kit',
-        icon: Folder,
+        href: 'https://github.com/tarikulcodes/user-invitation',
+        icon: Github,
     },
     {
         title: 'Documentation',
-        href: 'https://laravel.com/docs/starter-kits#react',
+        href: 'https://github.com/tarikulcodes/user-invitation/blob/main/README.md',
         icon: BookOpen,
     },
 ];

resources/js/components/app-sidebar.tsx

@@ -1,23 +1,29 @@
 import { SidebarGroup, SidebarGroupLabel, SidebarMenu, SidebarMenuButton, SidebarMenuItem } from '@/components/ui/sidebar';
-import { type NavItem } from '@/types';
+import { User, type NavItem } from '@/types';
 import { Link, usePage } from '@inertiajs/react';
 
 export function NavMain({ items = [] }: { items: NavItem[] }) {
     const page = usePage();
+    const { user } = page.props.auth as { user: User };
     return (
         <SidebarGroup className="px-2 py-0">
             <SidebarGroupLabel>Platform</SidebarGroupLabel>
             <SidebarMenu>
-                {items.map((item) => (
-                    <SidebarMenuItem key={item.title}>
-                        <SidebarMenuButton asChild isActive={page.url.startsWith(item.href)} tooltip={{ children: item.title }}>
-                            <Link href={item.href} prefetch>
-                                {item.icon && <item.icon />}
-                                <span>{item.title}</span>
-                            </Link>
-                        </SidebarMenuButton>
-                    </SidebarMenuItem>
-                ))}
+                {items.map((item) => {
+                    if (item.requiresAdmin && user.role !== 'admin') {
+                        return null;
+                    }
+                    return (
+                        <SidebarMenuItem key={item.title}>
+                            <SidebarMenuButton asChild isActive={page.url.startsWith(item.href)} tooltip={{ children: item.title }}>
+                                <Link href={item.href} prefetch>
+                                    {item.icon && <item.icon />}
+                                    <span>{item.title}</span>
+                                </Link>
+                            </SidebarMenuButton>
+                        </SidebarMenuItem>
+                    );
+                })}
             </SidebarMenu>
         </SidebarGroup>
     );

resources/js/components/nav-main.tsx

@@ -2,10 +2,11 @@ import { DataTable } from '@/components/datatable';
 import { DataTableColumnHeader } from '@/components/datatable-column-header';
 import { Avatar, AvatarFallback, AvatarImage } from '@/components/ui/avatar';
 import { Badge } from '@/components/ui/badge';
+import { Button } from '@/components/ui/button';
 import { Card, CardContent } from '@/components/ui/card';
 import AppLayout from '@/layouts/app-layout';
 import { User } from '@/types';
-import { Head, Link } from '@inertiajs/react';
+import { Head, Link, router } from '@inertiajs/react';
 import { ColumnDef } from '@tanstack/react-table';
 
 const UsersIndex = ({ users }: { users: User[] }) => {
@@ -48,7 +49,7 @@ const UsersIndex = ({ users }: { users: User[] }) => {
             header: 'Role',
             accessorKey: 'role',
             cell: ({ row }) => {
-                return <Badge variant="outline">{row.original.role?.charAt(0).toUpperCase() + row.original.role?.slice(1)}</Badge>;
+                return <Badge variant="outline">{row.original.role}</Badge>;
             },
         },
         {
@@ -59,11 +60,27 @@ const UsersIndex = ({ users }: { users: User[] }) => {
             header: 'Updated At',
             accessorKey: 'updated_at',
         },
+        {
+            header: 'Actions',
+            cell: ({ row }) => {
+                return (
+                    <Button
+                        variant="destructive"
+                        size="sm"
+                        onClick={() => router.delete(route('users.destroy', row.original.id))}
+                        disabled={row.original.id === 1 || row.original.id === 2}
+                    >
+                        Delete
+                    </Button>
+                );
+            },
+        },
     ];
 
     return (
         <AppLayout>
             <Head title="Users" />
+            {/* <pre>{JSON.stringify(users, null, 2)}</pre> */}
             <div className="p-4">
                 <h1 className="mb-4 text-2xl font-bold">Users</h1>
                 <Card>

resources/js/pages/users/index.tsx

@@ -20,6 +20,7 @@ export interface NavItem {
     href: string;
     icon?: LucideIcon | null;
     isActive?: boolean;
+    requiresAdmin?: boolean;
 }
 
 export interface SharedData {