From 2381bf1e014c5447490f5c8fe224a9bffcefd270 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Samuel=20=C5=A0tancl?= <samuel.stancl@gmail.com>
Date: Fri, 23 Aug 2019 12:37:32 +0200
Subject: [PATCH] PreventAccessFromTenantDomains middleware

---
 .../PreventAccessFromTenantDomains.php        | 27 +++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 src/Middleware/PreventAccessFromTenantDomains.php

diff --git a/src/Middleware/PreventAccessFromTenantDomains.php b/src/Middleware/PreventAccessFromTenantDomains.php
new file mode 100644
index 00000000..7a4c80b7
--- /dev/null
+++ b/src/Middleware/PreventAccessFromTenantDomains.php
@@ -0,0 +1,27 @@
+<?php
+
+namespace Stancl\Tenancy\Middleware;
+
+use Closure;
+
+class PreventAccessFromTenantDomains
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure  $next
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        // If the domain is not in exempt domains, it's a tenant domain.
+        // Tenant domains can't have routes without tenancy middleware.
+        if (! in_array(request()->getHost(), config('tenancy.exempt_domains')) &&
+            ! in_array('tenancy', request()->route()->middleware())) {
+                abort(404);
+        }
+
+        return $next($request);
+    }
+}