mirror of
https://github.com/anikeen-com/id.git
synced 2026-11-04 22:59:41 +00:00
Fix the anikeen API guard and register its user provider
- Register the guard driver and the anikeen user provider with static closures: Laravel binds extend() closures to the AuthManager, so $this->makeGuard() failed. - Look the token's sub up in the user's Anikeen ID column (anikeen_id by default; provider 'column', services.anikeen.user_id_column or useUserIdField()), not in the primary key; works with the anikeen, eloquent and database providers. - JwtParser: key from services.anikeen.public_key(_path) or the bundled key, read once per process; misconfiguration is an error, not a 401. Passport tokens have no client claim, so it is optional now. - Optional revocation check against Anikeen ID (verify_revocation), cached per token. - anikeenTokenCan() without a token, anikeenTokenCanAny(), scope middleware accept JSON responses. - Update the bundled staging public key to the current staging key. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VbpgPaLqhBzo1AXHNs9Cx5
This commit is contained in:
1 parent
b074ec3c0c
commit
dc29eb2844
12 files changed
+554
-163
No files matched your search
@@ -6,7 +6,7 @@ use Anikeen\Id\Exceptions\MissingScopeException;
|
||||
use Closure;
|
||||
use Illuminate\Auth\AuthenticationException;
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Http\Response;
|
||||
use Symfony\Component\HttpFoundation\Response;
|
||||
|
||||
class CheckForAnyScope extends UseParameters
|
||||
{
|
||||
@@ -17,7 +17,7 @@ class CheckForAnyScope extends UseParameters
|
||||
*/
|
||||
public function handle(Request $request, Closure $next, ...$scopes): Response
|
||||
{
|
||||
if (!$request->user() || !$request->user()->anikeenToken()) {
|
||||
if (!$request->user() || !method_exists($request->user(), 'anikeenToken') || !$request->user()->anikeenToken()) {
|
||||
throw new AuthenticationException;
|
||||
}
|
||||
|
||||
|
||||
@@ -6,7 +6,7 @@ use Anikeen\Id\Exceptions\MissingScopeException;
|
||||
use Closure;
|
||||
use Illuminate\Auth\AuthenticationException;
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Http\Response;
|
||||
use Symfony\Component\HttpFoundation\Response;
|
||||
|
||||
class CheckScopes extends UseParameters
|
||||
{
|
||||
@@ -17,7 +17,7 @@ class CheckScopes extends UseParameters
|
||||
*/
|
||||
public function handle(Request $request, Closure $next, ...$scopes): Response
|
||||
{
|
||||
if (!$request->user() || !$request->user()->anikeenToken()) {
|
||||
if (!$request->user() || !method_exists($request->user(), 'anikeenToken') || !$request->user()->anikeenToken()) {
|
||||
throw new AuthenticationException;
|
||||
}
|
||||
|
||||
|
||||
Reference in new issue
Block a user