route()->getController(); if (!$controller->getIsPublic()) { PermissionService::validate(); } return $next($request); } }