<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class AdminOrGuru
{
  public function handle(Request $request, Closure $next): Response
  {
    if (!auth()->check()) {
      return redirect()->route('login');
    }

    if (!in_array(auth()->user()->role, ['admin', 'guru'])) {
      abort(403, 'Akses ditolak.');
    }

    return $next($request);
  }
}
