Authorize without authenticated user.

AuthorizesRequestsWithoutUser.php

<?php

namespace App\Helpers;

use Illuminate\Contracts\Auth\Access\Gate;
use Illuminate\Auth\Access\AuthorizationException;

trait AuthorizesRequestsWithoutUser
{
    /**
     * Authorize a given action without an authenticated user.
     *
     * @param  mixed  $ability
     * @param  mixed|array  $arguments
     * @return \Illuminate\Auth\Access\Response
     *
     * @throws \Illuminate\Auth\Access\AuthorizationException
     */
    public function authorizeWithoutUser($ability, $arguments = [])
    {
        list($ability, $arguments) = $this->parseAbilityAndArguments($ability, $arguments);

        $policy = app(Gate::class)->getPolicyFor($arguments[0]);

        if (! call_user_func_array([$policy, $ability], $arguments)) {
            throw new AuthorizationException('This action is unauthorized.');
        }
    }
}