diff --git a/src/Http/Controllers/DelegateAuthController.php b/src/Http/Controllers/DelegateAuthController.php index 0889835..8707c68 100644 --- a/src/Http/Controllers/DelegateAuthController.php +++ b/src/Http/Controllers/DelegateAuthController.php @@ -10,53 +10,63 @@ class DelegateAuthController extends Controller { public function login(Request $request) { - $request->validate(['token' => 'required|string']); + $request->validate(["token" => "required|string"]); - $payload = $this->decryptToken($request->input('token')); + $payload = $this->decryptToken($request->input("token")); - abort_if(! $payload, 401, 'Token invalide.'); + abort_if(!$payload, 401, "Token invalide."); - $field = config('delegate-auth.user_field'); + $field = config("delegate-auth.user_field"); - abort_if(empty($payload[$field]), 401, 'Token invalide : champ '.$field.' manquant.'); + abort_if( + empty($payload[$field]), + 401, + "Token invalide : champ " . $field . " manquant.", + ); - $guard = Auth::guard(config('delegate-auth.guard')); - $user = $guard->getProvider()->retrieveByCredentials([$field => $payload[$field]]); + $guard = Auth::guard(config("delegate-auth.guard")); + $user = $guard + ->getProvider() + ->retrieveByCredentials([$field => $payload[$field]]); - abort_if(! $user, 401, 'Utilisateur introuvable.'); + abort_if(!$user, 401, "Utilisateur introuvable."); $guard->login($user); - return redirect(config('delegate-auth.redirect_after_login')); + return redirect(config("delegate-auth.redirect_after_login")); } public function logout(Request $request) { - $guard = Auth::guard(config('delegate-auth.guard')); + $guard = Auth::guard(config("delegate-auth.guard")); $guard->logout(); $request->session()->invalidate(); $request->session()->regenerateToken(); - return redirect(config('delegate-auth.redirect_after_logout')); + return redirect(config("delegate-auth.redirect_after_logout")); } private function decryptToken(string $token): ?array { - if (!str_contains($token, '.')) { + if (!str_contains($token, ".")) { return null; } - [$ivB64, $encrypted] = explode('.', $token, 2); + [$ivB64, $encrypted] = explode(".", $token, 2); - $iv = base64_decode($ivB64, strict: true); - $key = substr(hash('sha256', config('delegate-auth.encrypt_key'), binary: true), 0, 32); + $iv = base64_decode($ivB64, strict: true); + $key = substr( + hash("sha256", config("delegate-auth.encrypt_key"), binary: true), + 0, + 32, + ); if ($iv === false || strlen($iv) !== 16) { return null; } - $payload = openssl_decrypt($encrypted, 'AES-256-CBC', $key, 0, $iv); + $payload = openssl_decrypt($encrypted, "AES-256-CBC", $key, 0, $iv); if ($payload === false) { return null;