add authorization exception

Author: viralsolani

app/Exceptions/Handler.php

@@ -11,6 +11,7 @@
 use Symfony\Component\HttpKernel\Exception\MethodNotAllowedHttpException;
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException;
+use Illuminate\Auth\Access\AuthorizationException;
 
 class Handler extends ExceptionHandler
 {
@@ -52,9 +53,14 @@ public function report(Exception $exception)
      */
     public function render($request, Exception $exception)
     {
+        //dd($exception);
         if (strpos($request->url(), '/api/') !== false) {
             \Log::debug('API Request Exception - '.$request->url().' - '.$exception->getMessage().(!empty($request->all()) ? ' - '.json_encode($request->except(['password'])) : ''));
 
+            if ($exception instanceof AuthorizationException) {
+                return $this->setStatusCode(403)->respondWithError($exception->getMessage());
+            }
+
             if ($exception instanceof MethodNotAllowedHttpException) {
                 return $this->setStatusCode(403)->respondWithError('Please check HTTP Request Method. - MethodNotAllowedHttpException');
             }

app/Http/Controllers/Api/V1/UsersController.php

@@ -2,11 +2,12 @@
 
 namespace App\Http\Controllers\Api\V1;
 
-use App\Http\Resources\UserResource;
+use Validator;
+use Illuminate\Http\Request;
 use App\Models\Access\User\User;
+use App\Http\Resources\UserResource;
 use App\Repositories\Backend\Access\User\UserRepository;
-use Illuminate\Http\Request;
-use Validator;
+use App\Http\Requests\Backend\Access\User\ManageUserRequest;
 
 class UsersController extends APIController
 {
@@ -29,7 +30,7 @@ public function __construct(UserRepository $repository)
      *
      * @return \Illuminate\Http\JsonResponse
      */
-    public function index(Request $request)
+    public function index(ManageUserRequest $request)
     {
         $limit = $request->get('paginate') ? $request->get('paginate') : 25;
 

app/Http/Requests/Request.php

@@ -3,6 +3,7 @@
 namespace App\Http\Requests;
 
 use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Auth\Access\AuthorizationException;
 
 /**
  * Class Request.
@@ -25,4 +26,9 @@ public function forbiddenResponse()
 
         return redirect()->back()->withErrors($this->error);
     }
+
+    protected function failedAuthorization()
+    {
+        throw new AuthorizationException('This action is unauthorized.');
+    }
 }