LaravelのミドルウェアでIP制限を実装する方法

php artisan make:middleware CheckIp

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;

class CheckIp
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
     */
    public function handle(Request $request, Closure $next)
    {
        return $next($request);
    }
}

public function handle(Request $request, Closure $next)
{
    $user = Auth::user();
    $ipAddress = $request->ip();

　　// ログインユーザーに許可されているIPアドレスを取得
    $authorizedIpAdresses = $user->userAuthorizedIpAddresses->pluck('ip_address')->all();

　　// 登録IPアドレスが1つもなかったらそのままログインさせる
    if (empty($authorizedIpAdresses)) {
        return $next($request);
    }

    // アクセス元のIPアドレスとログインユーザーが許可されているIPアドレスを比較して登録されていなかったら403ページへ
    if (!IpUtils::checkIp($ipAddress, $authorizedIpAdresses)) {
        Log::error('App\Http\Middleware\CheckIpAddress: Access denied for IP. User ID >>> '. $user->id. ' / Request IP >>> '. $ipAddress);
        abort(403);
    }

    return $next($request);
}

/**
* The trusted proxies for this application.
*
* @var array<int, string>|string|null
*/
protected $proxies;

/**
* The trusted proxies for this application.
*
* @var array<int, string>|string|null
*/
protected $proxies = '*';

public function handle(Request $request, Closure $next)
{
    $user = Auth::user();

    // 本番環境とそれ以外の環境でIPアドレスの取得方法を分ける
    if (app()->isProduction()) {
        $ipAddress = explode(',', $request->header('X-Forwarded-For'))[0];
    } else {
        $ipAddress = $request->ip();
    }

    $authorizedIpAdresses = $user->userAuthorizedIpAddresses->pluck('ip_address')->all();
    if (empty($authorizedIpAdresses)) {
        return $next($request);
    }
    if (!IpUtils::checkIp($ipAddress, $authorizedIpAdresses)) {
        Log::error('App\Http\Middleware\CheckIpAddress: Access denied for IP. User ID >>> '. $user->id. ' / Request IP >>> '. $ipAddress);
        abort(403);
    }

    return $next($request);
}

     /**
     * The application's route middleware.
     *
     * These middleware may be assigned to groups or used individually.
     *
     * @var array<string, class-string|string>
     */
    protected $routeMiddleware = [
        'auth' => \App\Http\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
        'can' => \Illuminate\Auth\Middleware\Authorize::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
        'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,

        // IP制限チェックミドルウェア追加
        'checkIpAddress' => \App\Http\Middleware\CheckIp::class,
    ];

Route::middleware(['auth', 'checkIpAddress'])->group(function () {
    Route::name('dashboard')
        ->get('/dashboard', function () {
            return view('dashboard');
        });
});