60 lines
1.6 KiB
PHP
60 lines
1.6 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use App\Services\ConfigService;
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Cache;
|
|
|
|
class PargarAuth
|
|
{
|
|
public function handle(Request $request, Closure $next)
|
|
{
|
|
if (! app(ConfigService::class)->isPargarAccounting()) {
|
|
return response()->json([
|
|
'success' => false,
|
|
'message' => 'Pargar integration is disabled',
|
|
'data' => null,
|
|
], 503);
|
|
}
|
|
|
|
$auth = $request->header('Authorization') ?? $request->header('pargar');
|
|
$token = is_string($auth) ? trim(str_replace('Bearer ', '', $auth)) : '';
|
|
|
|
if ($token === '' || ! $this->tokenValid($token)) {
|
|
return response()->json([
|
|
'success' => false,
|
|
'message' => 'Invalid credentials!',
|
|
'data' => null,
|
|
], 401);
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
|
|
public static function issueToken(string $username): string
|
|
{
|
|
$token = bin2hex(random_bytes(32));
|
|
Cache::put(self::cacheKey($token), $username, now()->addDay());
|
|
|
|
return $token;
|
|
}
|
|
|
|
public static function tokenValid(string $token): bool
|
|
{
|
|
$config = app(ConfigService::class);
|
|
$static = trim($config->getString('pargar_api_token', ''));
|
|
if ($static !== '' && hash_equals($static, $token)) {
|
|
return true;
|
|
}
|
|
|
|
return Cache::has(self::cacheKey($token));
|
|
}
|
|
|
|
private static function cacheKey(string $token): string
|
|
{
|
|
return 'pargar_api_token:' . $token;
|
|
}
|
|
}
|