ldc-crm/app/Providers/AuthServiceProvider.php
2023-06-16 12:15:03 +02:00

68 lines
2 KiB
PHP

<?php
namespace App\Providers;
use App\Lib\Helper;
use App\Models\Service;
use Illuminate\Database\Eloquent\ModelNotFoundException;
use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
class AuthServiceProvider extends ServiceProvider
{
/**
* Register any authentication / authorization services.
*
* @return void
*/
public function boot()
{
Auth::viaRequest('api-hmac', function (Request $request) {
/**
* Un token devrais être fourni pour chaque requete
*/
if (is_null($request->bearer_token)) {
return null;
}
// * Si la route actuelle n'as pas de nom alors on refuse de la traiter.
if (!(Helper::getRoute($request))) {
// @codeCoverageIgnoreStart
return null;
// @codeCoverageIgnoreEnd
}
$service = null;
try {
// * On récupère le service actuel correspondant au token fourni.
$service = Service::getFromBearerToken($request->bearer_token ?? '');
} catch (ModelNotFoundException $e) {
return null;
}
// * Preload the brand as we will access it often later.
$service = $service->load('brand');
/**
** All ApiV2 routes must pass Brand model to controller action since a Brand owns
** a service token, otherwise the api cannot be called.
** This hack is a custom binder instead of passing
** this to route as a parameter
*/
app()->bind(Service::class, function () use ($service) {
return $service;
});
// * On authenticate la request en vérifiant sa signature.
if ($service->authenticateApi($request)) {
return $service;
}
return null;
});
}
}