/**
* Check for a user using Basic Authentication. If this was not a demo task where an ability to quickly test
* the code is somewhat more important than security, Oauth or JSON Web Tokens would be used
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
// Even though Basic Authentication is used for now, will not show a dialog for it.
// Instead, will generate appropriate API response
if (Auth::onceBasic()) {
return (new ApiController())->respondWhenUnauthenticated();
}
return $next($request);
}
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
$auth = Auth::onceBasic('email');
if (is_null($auth)) {
$user = DB::table('users')->where('administrator', '=', 1)->where('email', '=', $request->headers->get('php-auth-user'))->first();
if (is_null($user)) {
return response()->json('Invalid user.')->setStatusCode(403);
}
return $next($request);
}
return $auth;
}
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
return Auth::onceBasic('username') ?: $next($request);
}
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @param string|null $guard
* @return mixed
*/
public function handle($request, \Closure $next, $guard = null)
{
\Log::debug('Log authorization data', $request->headers->all());
return Auth::onceBasic('telephone') ?: $next($request);
}
