Slim PHP Host Middleware

HostMiddleware.php

<?php

namespace App\Middleware;

class HostMiddleware
{
    /**
     * Host middleware invokable class
     *
     * @param  \Psr\Http\Message\ServerRequestInterface $request  PSR7 request
     * @param  \Psr\Http\Message\ResponseInterface      $response PSR7 response
     * @param  callable                                 $next     Next middleware
     *
     * @return \Psr\Http\Message\ResponseInterface
     */
    public function __invoke($request, $response, $next)
    {
        $uri = $request->getUri();
        $host = $uri->getHost();
        $allowedHosts = explode(',', env('ALLOWED_HOSTS', 'localhost,127.0.0.1'));

        // Ensure host is allowed
        if (!in_array($host, $allowedHosts)) {
            return $response->withJson([
                'status' => 'error',
                'message' => "Host {$host} is not allowed to access this resource.",
            ], 405);
        }

        $response = $next($request, $response);

        return $response;
    }
}