[4.x] Add tokenCant() helper function to HasApiTokens (#552)

* [4.x] Add tokenCant helper function to `HasApiTokens`

* Simplified to just use the reverse of the tokenCan()

* fixed style issue

src/HasApiTokens.php

@@ -38,6 +38,17 @@ public function tokenCan(string $ability)
         return $this->accessToken && $this->accessToken->can($ability);
     }
 
+    /**
+     * Determine if the current API token does not have a given scope.
+     *
+     * @param  string  $ability
+     * @return bool
+     */
+    public function tokenCant(string $ability)
+    {
+        return ! $this->tokenCan($ability);
+    }
+
     /**
      * Create a new personal access token for the user.
      *

tests/Feature/HasApiTokensTest.php

@@ -48,6 +48,19 @@ public function test_can_check_token_abilities()
         $this->assertTrue($class->tokenCan('foo'));
     }
 
+    public function test_check_token_cant_ability()
+    {
+        $class = new ClassThatHasApiTokens;
+
+        $newToken = $class->createToken('test', ['foo']);
+
+        $class->withAccessToken($newToken->accessToken);
+
+        $this->assertTrue($class->tokenCant('bar'));
+
+        $this->assertFalse($class->tokenCant('foo'));
+    }
+
     public function test_token_checksum_is_valid()
     {
         $config = require __DIR__.'/../../config/sanctum.php';