add platform

app/Http/Kernel.php

@@ -42,6 +42,7 @@ class Kernel extends HttpKernel
         'api' => [
             'throttle:api',
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
+            \App\Http\Middleware\Platform::class,
         ],
     ];
 

app/Http/Middleware/Permission.php

@@ -20,7 +20,7 @@ class Permission
     {
         /** @var User $user */
         $user = $request->user();
-        if (!$user || !$user->canAccessAdmin()) {
+        if (!$user || (IS_PLATFORM_ADMIN && !$user->canAccessAdmin())) {
             do_log("denied!");
             throw new UnauthorizedException('Unauthorized!');
         }

app/Http/Middleware/Platform.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+
+class Platform
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure  $next
+     * @return mixed
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        if (empty(CURRENT_PLATFORM)) {
+            throw new \InvalidArgumentException("Require platform header.");
+        }
+        if (!in_array(CURRENT_PLATFORM, PLATFORMS)) {
+            throw new \InvalidArgumentException("Invalid platform: " . CURRENT_PLATFORM);
+        }
+        return $next($request);
+    }
+}