change token method & remove error page

src/DelegateAuthServiceProvider.php

@@ -19,6 +19,10 @@ class DelegateAuthServiceProvider extends ServiceProvider
             __DIR__.'/../config/delegate-auth.php' => config_path('delegate-auth.php'),
         ], 'delegate-auth-config');
 
+        $this->publishes([
+            __DIR__.'/../resources/views/errors/401.blade.php' => resource_path('views/errors/401.blade.php'),
+        ], 'delegate-auth-views');
+
         $this->loadRoutesFrom(__DIR__.'/../routes/web.php');
 
         if ($this->app->runningInConsole()) {

src/Http/Controllers/DelegateAuthController.php

@@ -10,58 +10,53 @@ class DelegateAuthController extends Controller
 {
     public function login(Request $request)
     {
-        $request->validate(['token' => 'required|string']);
+        $request->validate(["token" => "required|string"]);
 
-        $payload = $this->decryptToken($request->input('token'));
+        $payload = $this->decryptToken($request->input("token"));
 
-        abort_if(! $payload, 401, 'Token invalide.');
+        abort_if(!$payload, 401, "Token invalide.");
 
-        $field = config('delegate-auth.user_field');
+        $field = config("delegate-auth.user_field");
 
-        abort_if(empty($payload[$field]), 401, 'Token invalide : champ '.$field.' manquant.');
+        abort_if(
+            empty($payload[$field]),
+            401,
+            "Token invalide : champ " . $field . " manquant.",
+        );
 
-        $guard = Auth::guard(config('delegate-auth.guard'));
-        $user  = $guard->getProvider()->retrieveByCredentials([$field => $payload[$field]]);
+        $guard = Auth::guard(config("delegate-auth.guard"));
+        $user = $guard
+            ->getProvider()
+            ->retrieveByCredentials([$field => $payload[$field]]);
 
-        abort_if(! $user, 401, 'Utilisateur introuvable.');
+        abort_if(!$user, 401, "Utilisateur introuvable.");
 
         $guard->login($user);
 
-        return redirect(config('delegate-auth.redirect_after_login'));
+        return redirect(config("delegate-auth.redirect_after_login"));
     }
 
     public function logout(Request $request)
     {
-        $guard = Auth::guard(config('delegate-auth.guard'));
+        $guard = Auth::guard(config("delegate-auth.guard"));
         $guard->logout();
 
         $request->session()->invalidate();
         $request->session()->regenerateToken();
 
-        return redirect(config('delegate-auth.redirect_after_logout'));
+        return redirect(config("delegate-auth.redirect_after_logout"));
     }
 
     private function decryptToken(string $token): ?array
     {
-        if (!str_contains($token, '.')) {
-            return null;
-        }
-
-        [$ivB64, $encrypted] = explode('.', $token, 2);
-
-        $iv  = base64_decode($ivB64, strict: true);
-        $key = substr(hash('sha256', config('delegate-auth.encrypt_key'), binary: true), 0, 32);
-
-        if ($iv === false || strlen($iv) !== 16) {
-            return null;
-        }
-
-        $payload = openssl_decrypt($encrypted, 'AES-256-CBC', $key, 0, $iv);
-
-        if ($payload === false) {
-            return null;
-        }
-
+        $data = base64_decode(urldecode($token));
+        $payload = openssl_decrypt(
+            substr($data, 16),
+            "AES-256-CBC",
+            config("delegate.encrypt_key"),
+            0,
+            substr($data, 0, 16),
+        );
         $data = json_decode($payload, associative: true);
 
         return is_array($data) ? $data : null;