aboutsummaryrefslogtreecommitdiff
path: root/lib/classes/JsonApi/Routes/Users/UsersDelete.php
blob: c1d8d1d98b35403348ecd1ca35df45bb3544fb03 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
<?php

namespace JsonApi\Routes\Users;

use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
use JsonApi\JsonApiController;
use JsonApi\Errors\AuthorizationFailedException;
use JsonApi\Errors\RecordNotFoundException;

class UsersDelete extends JsonApiController
{
    protected $allowedIncludePaths = [];

    /**
     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
     */
    public function __invoke(Request $request, Response $response, $args)
    {
        if (!$observedUser = \User::find($args['id'])) {
            throw new RecordNotFoundException();
        }

        if (!Authority::canDeleteUser($this->getUser($request), $observedUser)) {
            throw new AuthorizationFailedException();
        }

        $observedUser->delete();

        return $this->getCodeResponse(204);
    }
}