[5.x] Throws Laravel\Horizon\Exceptions\ForbiddenException on unauthorized access

src/Exceptions/ForbiddenException.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace Laravel\Horizon\Exceptions;
+
+use Symfony\Component\HttpKernel\Exception\HttpException;
+
+class ForbiddenException extends HttpException
+{
+    /**
+     * Create a new exception instance.
+     *
+     * @return static
+     */
+    public static function make()
+    {
+        return new static(403);
+    }
+}

src/Http/Middleware/Authenticate.php

@@ -2,6 +2,7 @@
 
 namespace Laravel\Horizon\Http\Middleware;
 
+use Laravel\Horizon\Exceptions\ForbiddenException;
 use Laravel\Horizon\Horizon;
 
 class Authenticate
@@ -15,6 +16,10 @@ class Authenticate
      */
     public function handle($request, $next)
     {
-        return Horizon::check($request) ? $next($request) : abort(403);
+        if (! Horizon::check($request)) {
+            throw ForbiddenException::make();
+        }
+
+        return $next($request);
     }
 }

tests/Feature/AuthTest.php

@@ -2,10 +2,10 @@
 
 namespace Laravel\Horizon\Tests\Feature;
 
+use Laravel\Horizon\Exceptions\ForbiddenException;
 use Laravel\Horizon\Horizon;
 use Laravel\Horizon\Http\Middleware\Authenticate;
 use Laravel\Horizon\Tests\IntegrationTest;
-use Symfony\Component\HttpKernel\Exception\HttpException;
 
 class AuthTest extends IntegrationTest
 {
@@ -41,9 +41,9 @@ function ($value) {
         $this->assertSame('response', $response);
     }
 
-    public function test_authentication_middleware_responds_with_403_on_failure()
+    public function test_authentication_middleware_throws_on_failure()
     {
-        $this->expectException(HttpException::class);
+        $this->expectException(ForbiddenException::class);
 
         Horizon::auth(function () {
             return false;