Jérémy Munsch
81aabdab72
This removes api authentification with token in favor of signature method. Refactorize code and clean up. It add more unit test plus code coverage in test/converage. - Added config.api.timestampTimeout - Added Helper::signRequest This calculates the request signature - Added more unit tests and extend code coverage. - Added rate limiter for web routes - Added RemoveSpaces Sanitizer on api requests - Added stress test suite - Changed AuthServiceProvider api-token to api-hmac - Changed CustomerSeeder to have at least of customer activated (for unit tests) - Changed used transation for saveing multiple models - Changed, in ServiceController generateApiToken to generateServicePassword - Changed, timestamp has to be send in request with a DateTime format, it also has to a UTC value - Composer added brianium/paratest - Composer update - Fixed case where removing single optin could be the wrong one (not for the good service) - Fixed customer delete - Fixed customer would not be resolved by brand. - Fixed Really check that request is json checking body content, preventing sending malformed requests - Remove ApiError::needAuth - Removed api_token - Removed ApiController::authenticate - Removed config.api.tokenTimeout - Removed Header check or usage because of HAProxy doing weird stuff - Removed lock files from gitignore - Removed memcached dependency - Removed unused questions resources api routes - Removed workspace file Migrations - Added unique index on services.bearer_token - Changed customer_id on customer_answer is nullable - Changed services.bearer_pwd length to 312 (the size of the token) - Dropped services.api_token and service.api_token_date
58 lines
1.9 KiB
PHP
58 lines
1.9 KiB
PHP
<?php
|
|
|
|
return [
|
|
|
|
/*
|
|
* Set trusted proxy IP addresses.
|
|
*
|
|
* Both IPv4 and IPv6 addresses are
|
|
* supported, along with CIDR notation.
|
|
*
|
|
* The "*" character is syntactic sugar
|
|
* within TrustedProxy to trust any proxy
|
|
* that connects directly to your server,
|
|
* a requirement when you cannot know the address
|
|
* of your proxy (e.g. if using ELB or similar).
|
|
*
|
|
*/
|
|
|
|
'proxies' => [
|
|
// * HA PROXY prod "Virtual IP".
|
|
'192.168.31.9',
|
|
// * HA PROXY prod "Virtual IP" redondance.
|
|
'192.168.31.10',
|
|
// * HA PROXY dev "Virtual IP".
|
|
'192.168.34.15'
|
|
],
|
|
|
|
/*
|
|
* To trust one or more specific proxies that connect
|
|
* directly to your server, use an array or a string separated by comma of IP addresses:
|
|
*/
|
|
|
|
/*
|
|
* Or, to trust all proxies that connect
|
|
* directly to your server, use a "*"
|
|
*/
|
|
|
|
/*
|
|
* Which headers to use to detect proxy related data (For, Host, Proto, Port)
|
|
*
|
|
* Options include:
|
|
*
|
|
* - Illuminate\Http\Request::HEADER_X_FORWARDED_ALL (use all x-forwarded-* headers to establish trust)
|
|
* - Illuminate\Http\Request::HEADER_FORWARDED (use the FORWARDED header to establish trust)
|
|
* - Illuminate\Http\Request::HEADER_X_FORWARDED_AWS_ELB (If you are using AWS Elastic Load Balancer)
|
|
*
|
|
* - 'HEADER_X_FORWARDED_ALL' (use all x-forwarded-* headers to establish trust)
|
|
* - 'HEADER_FORWARDED' (use the FORWARDED header to establish trust)
|
|
* - 'HEADER_X_FORWARDED_AWS_ELB' (If you are using AWS Elastic Load Balancer)
|
|
*
|
|
* @link https://symfony.com/doc/current/deployment/proxies.html
|
|
*/
|
|
|
|
'headers' => Illuminate\Http\Request::HEADER_X_FORWARDED_FOR |
|
|
Illuminate\Http\Request::HEADER_X_FORWARDED_HOST |
|
|
Illuminate\Http\Request::HEADER_X_FORWARDED_PORT |
|
|
Illuminate\Http\Request::HEADER_X_FORWARDED_PROTO,
|
|
];
|