isaaccladandCursor
6c9c742ed8
Deploy Ladill Care / deploy (push) Failing after 13s
Healthcare management app: patients, appointments, consultations, lab, pharmacy inventory, billing, and reports at care.ladill.com. Co-authored-by: Cursor <cursoragent@cursor.com>
39 lines
1.1 KiB
PHP
39 lines
1.1 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
/**
|
|
* Generic service-to-service auth for internal APIs. Validates the bearer token
|
|
* against per-consumer keys in config("{namespace}.service_api_keys") with a
|
|
* constant-time compare, and records the caller. Usage: auth.service:crm.
|
|
*/
|
|
class AuthenticateService
|
|
{
|
|
public function handle(Request $request, Closure $next, string $namespace = 'crm'): Response
|
|
{
|
|
$token = (string) $request->bearerToken();
|
|
$caller = null;
|
|
|
|
if ($token !== '') {
|
|
foreach ((array) config("{$namespace}.service_api_keys", []) as $name => $key) {
|
|
if (is_string($key) && $key !== '' && hash_equals($key, $token)) {
|
|
$caller = $name;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($caller === null) {
|
|
return response()->json(['error' => 'Unauthorized.'], 401);
|
|
}
|
|
|
|
$request->attributes->set('service_caller', $caller);
|
|
|
|
return $next($request);
|
|
}
|
|
}
|