misc_pterodactyl-panel/app/Http/Middleware/DaemonAuthenticate.php

66 lines
1.6 KiB
PHP
Raw Normal View History

<?php
/**
* Pterodactyl - Panel
* Copyright (c) 2015 - 2017 Dane Everitt <dane@daneeveritt.com>.
*
2017-09-26 02:43:01 +00:00
* This software is licensed under the terms of the MIT license.
* https://opensource.org/licenses/MIT
*/
namespace Pterodactyl\Http\Middleware;
use Closure;
2017-10-29 17:37:25 +00:00
use Illuminate\Http\Request;
use Pterodactyl\Contracts\Repository\NodeRepositoryInterface;
2017-11-03 23:16:49 +00:00
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
class DaemonAuthenticate
{
/**
* An array of route names to not apply this middleware to.
*
* @var array
*/
2017-10-29 17:37:25 +00:00
private $except = [
'daemon.configuration',
];
2017-10-29 17:37:25 +00:00
/**
* @var \Pterodactyl\Contracts\Repository\NodeRepositoryInterface
*/
private $repository;
/**
* Create a new filter instance.
*
2017-10-29 17:37:25 +00:00
* @param \Pterodactyl\Contracts\Repository\NodeRepositoryInterface $repository
*/
2017-10-29 17:37:25 +00:00
public function __construct(NodeRepositoryInterface $repository)
{
2017-10-29 17:37:25 +00:00
$this->repository = $repository;
}
/**
* Handle an incoming request.
*
2017-08-22 03:10:48 +00:00
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
2017-10-29 17:37:25 +00:00
public function handle(Request $request, Closure $next)
{
if (in_array($request->route()->getName(), $this->except)) {
return $next($request);
}
if (! $request->header('X-Access-Node')) {
2017-11-03 23:16:49 +00:00
throw new AccessDeniedHttpException;
}
2017-11-03 23:16:49 +00:00
$node = $this->repository->findWhere(['daemonSecret' => $request->header('X-Access-Node')]);
2017-10-29 17:37:25 +00:00
$request->attributes->set('node', $node);
return $next($request);
}
}