TenantAtlas/app/Support/Middleware/EnsureFilamentTenantSelected.php

<?php

namespace App\Support\Middleware;

use App\Filament\Pages\ChooseWorkspace;
use App\Models\Tenant;
use App\Models\User;
use App\Models\Workspace;
use App\Services\Auth\CapabilityResolver;
use App\Support\Workspaces\WorkspaceContext;
use Closure;
use Filament\Facades\Filament;
use Filament\Models\Contracts\HasTenants;
use Filament\Navigation\NavigationBuilder;
use Filament\Navigation\NavigationItem;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class EnsureFilamentTenantSelected
{
    /**
     * @param  Closure(Request): Response  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        $panel = Filament::getCurrentOrDefaultPanel();

        $path = '/'.ltrim($request->path(), '/');

        if ($path === '/livewire/update') {
            $refererPath = parse_url((string) $request->headers->get('referer', ''), PHP_URL_PATH) ?? '';
            $refererPath = '/'.ltrim((string) $refererPath, '/');

            if (preg_match('#^/admin/operations/[^/]+$#', $refererPath) === 1) {
                $this->configureNavigationForRequest($panel);

                return $next($request);
            }
        }

        if (preg_match('#^/admin/operations/[^/]+$#', $path) === 1) {
            $this->configureNavigationForRequest($panel);

            return $next($request);
        }

        if ($request->route()?->hasParameter('tenant')) {
            $user = $request->user();

            if ($user === null) {
                return $next($request);
            }

            if (! $user instanceof HasTenants) {
                abort(404);
            }

            if (! $panel->hasTenancy()) {
                return $next($request);
            }

            $tenantParameter = $request->route()->parameter('tenant');
            $tenant = $panel->getTenant($tenantParameter);

            if (! $tenant instanceof Tenant) {
                abort(404);
            }

            $workspaceContext = app(WorkspaceContext::class);
            $workspaceId = $workspaceContext->currentWorkspaceId($request);

            if ($workspaceId === null) {
                abort(404);
            }

            if ((int) $tenant->workspace_id !== (int) $workspaceId) {
                abort(404);
            }

            $workspace = Workspace::query()->whereKey($workspaceId)->first();

            if (! $workspace instanceof Workspace) {
                abort(404);
            }

            if (! $user instanceof User || ! $workspaceContext->isMember($user, $workspace)) {
                abort(404);
            }

            if (! $user->canAccessTenant($tenant)) {
                abort(404);
            }

            Filament::setTenant($tenant, true);
            $this->configureNavigationForRequest($panel);

            return $next($request);
        }

        if (
            str_starts_with($path, '/admin/w/')
            || str_starts_with($path, '/admin/workspaces')
            || in_array($path, ['/admin/choose-workspace', '/admin/choose-tenant', '/admin/no-access'], true)
        ) {
            $this->configureNavigationForRequest($panel);

            return $next($request);
        }

        if (filled(Filament::getTenant())) {
            $this->configureNavigationForRequest($panel);

            return $next($request);
        }

        $user = $request->user();

        if (! $user instanceof User) {
            $this->configureNavigationForRequest($panel);

            return $next($request);
        }

        $tenant = null;

        $workspaceId = app(WorkspaceContext::class)->currentWorkspaceId($request);

        if ($workspaceId !== null) {
            $tenant = $user->tenants()
                ->where('workspace_id', $workspaceId)
                ->where('status', 'active')
                ->first();

            if (! $tenant) {
                $tenant = $user->tenants()
                    ->where('workspace_id', $workspaceId)
                    ->first();
            }

            if (! $tenant) {
                $tenant = $user->tenants()
                    ->withTrashed()
                    ->where('workspace_id', $workspaceId)
                    ->first();
            }
        }

        if (! $tenant) {
            try {
                $tenant = Tenant::current();
            } catch (\RuntimeException) {
                $tenant = null;
            }

            if ($tenant instanceof Tenant && ! app(CapabilityResolver::class)->isMember($user, $tenant)) {
                $tenant = null;
            }
        }

        if (! $tenant) {
            $tenant = $user->tenants()
                ->where('status', 'active')
                ->first();
        }

        if (! $tenant) {
            $tenant = $user->tenants()->first();
        }

        if (! $tenant) {
            $tenant = $user->tenants()->withTrashed()->first();
        }

        if ($tenant) {
            Filament::setTenant($tenant, true);
        }

        $this->configureNavigationForRequest($panel);

        return $next($request);
    }

    private function configureNavigationForRequest(\Filament\Panel $panel): void
    {
        if (! $panel->hasTenancy()) {
            return;
        }

        if (filled(Filament::getTenant())) {
            $panel->navigation(true);

            return;
        }

        $panel->navigation(function (): NavigationBuilder {
            return app(NavigationBuilder::class)
                ->item(
                    NavigationItem::make('Workspaces')
                        ->url(fn (): string => ChooseWorkspace::getUrl())
                        ->icon('heroicon-o-squares-2x2')
                        ->group('Settings')
                        ->sort(10),
                );
        });
    }
}