phpvms/app/Http/Requests/Acars/PositionRequest.php

<?php

namespace App\Http\Requests\Acars;

use App\Contracts\FormRequest;
use App\Models\Pirep;
use Illuminate\Support\Facades\Auth;

class PositionRequest extends FormRequest
{
    /**
     * Is the user allowed to do this?
     */
    public function authorize(): bool
    {
        $pirep = Pirep::findOrFail($this->route('pirep_id'), ['user_id']);
        return $pirep->user_id === Auth::id();
    }

    public function rules(): array
    {
        $rules = [
            'positions'               => 'required|array',
            'positions.*.lat'         => 'required|numeric',
            'positions.*.lon'         => 'required|numeric',
            'positions.*.status'      => 'nullable',
            'positions.*.altitude'    => 'nullable|numeric',
            'positions.*.heading'     => 'nullable|numeric|between:0,360',
            'positions.*.vs'          => 'nullable',
            'positions.*.gs'          => 'nullable',
            'positions.*.transponder' => 'nullable',
            'positions.*.autopilot'   => 'nullable',
            'positions.*.fuel'        => 'nullable|numeric',
            'positions.*.fuel_flow'   => 'nullable|numeric',
            'positions.*.log'         => 'nullable',
            'positions.*.sim_time'    => 'nullable|date',
            'positions.*.created_at'  => 'nullable|date',
        ];

        return $rules;
    }
}