<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Auth;

class RememberSession
{
    public function handle($request, Closure $next)
    {
        if (Auth::check()) {
            $user = Auth::user();
            if ($request->session()->get('remember_token') !== $user->remember_token) {
                Auth::logout();
                return redirect('/admin')->withErrors(['message' => 'Your session has expired.']);
            }
        }

        return $next($request);
    }
}