Ejemplo n.º 1
0
 public function authenticate(Request $request, Route $route)
 {
     if (!$request->bearerToken() || empty($request->bearerToken())) {
         throw new UnauthorizedHttpException('The authentication header was missing or malformed');
     }
     list($public, $hashed) = explode('.', $request->bearerToken());
     $key = APIKey::where('public', $public)->first();
     if (!$key) {
         throw new AccessDeniedHttpException('Invalid API Key.');
     }
     // Check for Resource Permissions
     if (!empty($request->route()->getName())) {
         if (!is_null($key->allowed_ips)) {
             $inRange = false;
             foreach (json_decode($key->allowed_ips) as $ip) {
                 if (Range::parse($ip)->contains(new IP($request->ip()))) {
                     $inRange = true;
                     break;
                 }
             }
             if (!$inRange) {
                 throw new AccessDeniedHttpException('This IP address <' . $request->ip() . '> does not have permission to use this API key.');
             }
         }
         foreach (APIPermission::where('key_id', $key->id)->get() as &$row) {
             if ($row->permission === '*' || $row->permission === $request->route()->getName()) {
                 $this->permissionAllowed = true;
                 continue;
             }
         }
         if (!$this->permissionAllowed) {
             throw new AccessDeniedHttpException('You do not have permission to access this resource.');
         }
     }
     try {
         $decrypted = Crypt::decrypt($key->secret);
     } catch (\Illuminate\Contracts\Encryption\DecryptException $ex) {
         throw new HttpException('There was an error while attempting to check your secret key.');
     }
     $this->url = urldecode($request->fullUrl());
     if ($this->_generateHMAC($request->getContent(), $decrypted) !== base64_decode($hashed)) {
         throw new BadRequestHttpException('The hashed body was not valid. Potential modification of contents in route.');
     }
     return true;
 }
Ejemplo n.º 2
0
 /**
  * @dataProvider getTestCountData
  */
 public function testCount($data, $expected)
 {
     $this->assertEquals($expected, count(Range::parse($data)));
 }
Ejemplo n.º 3
0
 /**
  * @dataProvider getTestContainsData
  */
 public function testContains($data, $find, $expected)
 {
     $this->assertEquals($expected, Range::parse($data)->contains(new IP($find)));
 }