Romain/delegate-auth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pint

Browse Source
This commit is contained in:
Romulus21
2026-05-27 10:16:44 +02:00
parent f8d88c91fc
commit ccd7934bb8
1 changed files with 26 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Http/Controllers/DelegateAuthController.php
+25 -15
View File
@@ -10,53 +10,63 @@ class DelegateAuthController extends Controller
{ {
public function login(Request $request) public function login(Request $request)
{ {
$request->validate(['token' => 'required|string']); $request->validate(["token" => "required|string"]);
$payload = $this->decryptToken($request->input('token')); $payload = $this->decryptToken($request->input("token"));
abort_if(! $payload, 401, 'Token invalide.'); abort_if(!$payload, 401, "Token invalide.");
$field = config('delegate-auth.user_field'); $field = config("delegate-auth.user_field");
abort_if(empty($payload[$field]), 401, 'Token invalide : champ '.$field.' manquant.'); abort_if(
empty($payload[$field]),
401,
"Token invalide : champ " . $field . " manquant.",
);
$guard = Auth::guard(config('delegate-auth.guard')); $guard = Auth::guard(config("delegate-auth.guard"));
$user = $guard->getProvider()->retrieveByCredentials([$field => $payload[$field]]); $user = $guard
->getProvider()
->retrieveByCredentials([$field => $payload[$field]]);
abort_if(! $user, 401, 'Utilisateur introuvable.'); abort_if(!$user, 401, "Utilisateur introuvable.");
$guard->login($user); $guard->login($user);
return redirect(config('delegate-auth.redirect_after_login')); return redirect(config("delegate-auth.redirect_after_login"));
} }
public function logout(Request $request) public function logout(Request $request)
{ {
$guard = Auth::guard(config('delegate-auth.guard')); $guard = Auth::guard(config("delegate-auth.guard"));
$guard->logout(); $guard->logout();
$request->session()->invalidate(); $request->session()->invalidate();
$request->session()->regenerateToken(); $request->session()->regenerateToken();
return redirect(config('delegate-auth.redirect_after_logout')); return redirect(config("delegate-auth.redirect_after_logout"));
} }
private function decryptToken(string $token): ?array private function decryptToken(string $token): ?array
{ {
if (!str_contains($token, '.')) { if (!str_contains($token, ".")) {
return null; return null;
} }
[$ivB64, $encrypted] = explode('.', $token, 2); [$ivB64, $encrypted] = explode(".", $token, 2);
$iv = base64_decode($ivB64, strict: true); $iv = base64_decode($ivB64, strict: true);
$key = substr(hash('sha256', config('delegate-auth.encrypt_key'), binary: true), 0, 32); $key = substr(
hash("sha256", config("delegate-auth.encrypt_key"), binary: true),
0,
32,
);
if ($iv === false || strlen($iv) !== 16) { if ($iv === false || strlen($iv) !== 16) {
return null; return null;
} }
$payload = openssl_decrypt($encrypted, 'AES-256-CBC', $key, 0, $iv); $payload = openssl_decrypt($encrypted, "AES-256-CBC", $key, 0, $iv);
if ($payload === false) { if ($payload === false) {
return null; return null;