<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class EnsureActiveAccount
{
    public function handle($request, Closure $next)
    {
        $guard = Auth::guard('web');
        $user = $guard->user();

        if ($user && $user->status !== 'active') {
            $guard->logout();
            $request->session()->invalidate();
            $request->session()->regenerateToken();

            $message = 'Akaun anda tidak aktif. Sila hubungi pentadbir.';
            if ($request->expectsJson()) {
                return response()->json(['message' => $message], 403);
            }

            return redirect()->route('login')->withErrors(['username' => $message]);
        }

        return $next($request);
    }
}