47 lines
1.4 KiB
PHP
47 lines
1.4 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use App\Enums\Users\RoleEnum;
|
|
use App\Models\Service;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Illuminate\Database\Eloquent\ModelNotFoundException;
|
|
use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Gate;
|
|
|
|
class AuthServiceProvider extends ServiceProvider
|
|
{
|
|
/**
|
|
* Register any authentication / authorization services.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function boot()
|
|
{
|
|
$this->registerPolicies();
|
|
|
|
Gate::define('isConceptor', function (Model $authModel) {
|
|
return isset($authModel->role) && $authModel->role === RoleEnum::conceptor;
|
|
});
|
|
|
|
Auth::viaRequest('api-hmac', function (Request $request) {
|
|
$service = null;
|
|
|
|
try {
|
|
// * On récupère le service actuel correspondant au token fourni.
|
|
$service = Service::query()->where('bearer_token', $request->input('bearer_token'))->firstOrFail();
|
|
} catch (ModelNotFoundException $e) {
|
|
return null;
|
|
}
|
|
|
|
// * On authenticate la request en vérifiant sa signature.
|
|
if ($service->authenticateApi($request)) {
|
|
return $service;
|
|
}
|
|
|
|
return null;
|
|
});
|
|
}
|
|
}
|