Restrict API access for free/unpaid accounts

2021-11-10 08:23:22 +11:00 · 2021-11-10 08:23:22 +11:00 · d0be8f744c
commit d0be8f744c
parent 075fe7a5e5
1 changed files with 10 additions and 0 deletions
--- a/app/Http/Middleware/TokenAuth.php
+++ b/app/Http/Middleware/TokenAuth.php
@ -42,6 +42,16 @@ class TokenAuth
                return response()->json($error, 403);
            }

+            if(Ninja::isHosted() && $company_token->is_system == 0 && !$user->account->isPaid()){
+                
+                $error = [
+                    'message' => 'Feature not available with free / unpaid account.',
+                    'errors' => new stdClass,
+                ];
+                
+                return response()->json($error, 403);
+            }
+
            /*
            |
            | Necessary evil here: As we are authenticating on CompanyToken,