<?php

namespace App\Http\Middleware;

use App\Lib\AdminSecure;
use Closure;
use Dxw\CIDR\IP;
use Illuminate\Http\Request;

class AdminSecureMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure                 $next
     * @return mixed
     */
    public function handle(Request $request, Closure $next)
    {
        if (config('app.env') === 'local') {
            return $next($request);
        }

        $client_ip     = AdminSecure::fetchClientIp();

        $ip_is_allowed = \collect(AdminSecure::getOptions()->getCidrList())
            ->reduce(function ($initial, $ip_range) use ($client_ip) {
                return $initial || IP::contains(
                    $ip_range,
                    $client_ip
                )->unwrap();
            });

        $ip_is_allowed_by_config = \collect(AdminSecure::getOptions()->getCidrAllowedList())
            ->reduce(function ($initial, $ip_range) use ($client_ip) {
                return $initial || IP::contains(
                    $ip_range,
                    $client_ip
                )->unwrap();
            });

        if ($ip_is_allowed or $ip_is_allowed_by_config or AdminSecure::ipIsPrivate($client_ip)) {
            return $next($request);
        }

        abort(403, \trans('Denied IP'));
    }
}