<?php

namespace App\Http\Middleware;

use App\Lib\AdminSecure;
use Closure;
use Dxw\CIDR\IP;
use Illuminate\Http\Request;

class AdminSecureMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure                 $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        if (config('app.env') === 'local') {
            return $next($request);
        }

        $client_ip     = AdminSecure::fetchClientIp();

        $ip_is_allowed = \collect(AdminSecure::getOptions()->getCidrList())
            ->reduce(fn($initial, $ip_range) => $initial || IP::contains(
                $ip_range,
                $client_ip
            )->unwrap());

        $ip_is_allowed_by_config = \collect(AdminSecure::getOptions()->getCidrAllowedList())
            ->reduce(fn($initial, $ip_range) => $initial || IP::contains(
                $ip_range,
                $client_ip
            )->unwrap());

        if ($ip_is_allowed or $ip_is_allowed_by_config or AdminSecure::ipIsPrivate($client_ip)) {
            return $next($request);
        }

        abort(403, \trans('Denied IP'));
    }
}