ldc-legaulois/app/Http/Requests/Club/Messages/DeleteMessagesRequest.php

<?php

namespace App\Http\Requests\Club\Messages;

use App\Models\Message;
use Illuminate\Contracts\Database\Eloquent\Builder;
use Illuminate\Foundation\Http\FormRequest;
use Illuminate\Support\Facades\Auth;

class DeleteMessagesRequest extends FormRequest
{
    /**
     * Determine if the user is authorized to make this request.
     */
    public function authorize(): bool
    {
        return Auth::guard('club')->check();
    }

    /**
     * Get the validation rules that apply to the request.
     */
    public function rules(): array
    {
        return [
            'message' => [
                'required',
                'exists:messages,id',
                // phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundBeforeLastUsed
                function (string $attribute, $value, callable $fail) {
                    /** @var \App\Models\Customer */
                    $customer    = Auth::guard('club')->user();
                    $ownsMessage = Message::query()->where('id', $value)->where(function (Builder $q) use ($customer) {
                        $q->whereHas('toCustomer', fn (Builder $q) => $q->where('id', $customer->getKey()))
                            ->orWhereHas('fromCustomer', fn (Builder $q) => $q->where('id', $customer->getKey()));
                    })->exists();
                    if (! $ownsMessage) {
                        $fail(trans('Ce message ne vous appartient pas'));
                    }
                },
            ],
        ];
    }
}