/** * Handle an incoming request. * * @param Request $request * @param Closure $next * @param string $action * @param string $resource * @return mixed */ public function handle(Request $request, Closure $next, $action, $resource = null) { $user = $this->jwtAuth->getUser(); $lock = $this->lock->makeCallerLockAware($user); if (!$user->can($action, $resource)) { throw new ForbiddenException(); } return $next($request); }