GeoNetAgent, LDAPWeb, server-audit, server-connection
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

27 lines
717 B

<?php
namespace App\Http\Middleware;
use App\Support\ApiActor;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class ApiScope
{
public function handle(Request $request, Closure $next, string ...$scopes): Response
{
/** @var ApiActor|null $actor */
$actor = $request->attributes->get('api_actor');
if ($actor === null || ! $actor->hasAnyScope($scopes)) {
return response()->json([
'error' => 'forbidden',
'message' => 'Insufficient scope. Required: ' . implode(' or ', $scopes),
'required_scopes' => $scopes,
], 403);
}
return $next($request);
}
}