Blame: app/Http/Middleware/Authenticate.php - BookStackApp/BookStack

A platform to create documentation/wiki content built with PHP & Laravel

0 0 18 PHP

Initial commit 2015-07-12 20:01:42 +01:00			`<?php`

Change application namespace to BookStack 2015-09-10 19:31:09 +01:00			`namespace BookStack\Http\Middleware;`
Initial commit 2015-07-12 20:01:42 +01:00
			`use Closure;`
Change email confirmation from own middle to trait Email confirmation middleware caused more mess than good, As caused priority issues and it depended on auth actions. Instead its now a trai used on auth middlewares. Also used 'EncryptCookies' middleware on API instead of custom decryption in custom middleware since we'd need to do replicate all the same actions anyway. Shouldn't have too much effect since it only actions over cookies that exist, of which none should be there for most API requests. Also split out some large guard functions to be a little more readable and appease codeclimate. 2019-12-30 15:46:12 +00:00			`use Illuminate\Http\Request;`
Initial commit 2015-07-12 20:01:42 +01:00
			`class Authenticate`
			`{`
			`/**`
			`* Handle an incoming request.`
			`*/`
Linked new API token system into middleware Base logic in place but needs review and refactor to see if can better fit into Laravel using 'Guard' system. Currently has issues due to cookies in use from active session on API. 2019-12-30 02:16:07 +00:00			`public function handle(Request $request, Closure $next)`
Initial commit 2015-07-12 20:01:42 +01:00			`{`
Guest control: Cleaned methods involved in fetching/handling - Moves guest user caching from User class to app container for simplicity. - Updates test to use simpler $this->users->guest() method for consistency. - Streamlined helpers to avoid function overlap for simplicity. - Extracted user profile dropdown while doing changes. 2023-09-16 13:18:35 +01:00			`if (!user()->hasAppAccess()) {`
Initial commit 2015-07-12 20:01:42 +01:00			`if ($request->ajax()) {`
			`return response('Unauthorized.', 401);`
			`}`
Apply fixes from StyleCI 2021-08-21 14:49:40 +00:00
Worked on MFA setup required flow - Restructured some of the route naming to be a little more consistent. - Moved the routes about to be more logically in one place. - Created a new middleware to handle the auth of people that should be allowed access to mfa setup routes, since these could be used by existing logged in users or by people needing to setup MFA on access. - Added testing to cover MFA setup required flow. - Added TTL and method tracking to session last-login tracking system. 2021-08-02 22:02:25 +01:00			`return redirect()->guest(url('/login'));`
Initial commit 2015-07-12 20:01:42 +01:00			`}`

			`return $next($request);`
			`}`
			`}`