Romain/delegate-auth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pint

Browse Source
This commit is contained in:
Romulus21
2026-05-27 10:16:44 +02:00
parent f8d88c91fc
commit ccd7934bb8
1 changed files with 26 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Http/Controllers/DelegateAuthController.php
+26 -16
View File
@@ -10,53 +10,63 @@ class DelegateAuthController extends Controller
{
public function login(Request $request)
{
$request->validate(['token' => 'required|string']);
$request->validate(["token" => "required|string"]);
$payload = $this->decryptToken($request->input('token'));
$payload = $this->decryptToken($request->input("token"));
abort_if(! $payload, 401, 'Token invalide.');
abort_if(!$payload, 401, "Token invalide.");
$field = config('delegate-auth.user_field');
$field = config("delegate-auth.user_field");
abort_if(empty($payload[$field]), 401, 'Token invalide : champ '.$field.' manquant.');
abort_if(
empty($payload[$field]),
401,
"Token invalide : champ " . $field . " manquant.",
);
$guard = Auth::guard(config('delegate-auth.guard'));
$user = $guard->getProvider()->retrieveByCredentials([$field => $payload[$field]]);
$guard = Auth::guard(config("delegate-auth.guard"));
$user = $guard
->getProvider()
->retrieveByCredentials([$field => $payload[$field]]);
abort_if(! $user, 401, 'Utilisateur introuvable.');
abort_if(!$user, 401, "Utilisateur introuvable.");
$guard->login($user);
return redirect(config('delegate-auth.redirect_after_login'));
return redirect(config("delegate-auth.redirect_after_login"));
}
public function logout(Request $request)
{
$guard = Auth::guard(config('delegate-auth.guard'));
$guard = Auth::guard(config("delegate-auth.guard"));
$guard->logout();
$request->session()->invalidate();
$request->session()->regenerateToken();
return redirect(config('delegate-auth.redirect_after_logout'));
return redirect(config("delegate-auth.redirect_after_logout"));
}
private function decryptToken(string $token): ?array
{
if (!str_contains($token, '.')) {
if (!str_contains($token, ".")) {
return null;
}
[$ivB64, $encrypted] = explode('.', $token, 2);
[$ivB64, $encrypted] = explode(".", $token, 2);
$iv = base64_decode($ivB64, strict: true);
$key = substr(hash('sha256', config('delegate-auth.encrypt_key'), binary: true), 0, 32);
$iv = base64_decode($ivB64, strict: true);
$key = substr(
hash("sha256", config("delegate-auth.encrypt_key"), binary: true),
0,
32,
);
if ($iv === false || strlen($iv) !== 16) {
return null;
}
$payload = openssl_decrypt($encrypted, 'AES-256-CBC', $key, 0, $iv);
$payload = openssl_decrypt($encrypted, "AES-256-CBC", $key, 0, $iv);
if ($payload === false) {
return null;