Merge branch 'master' of https://git.mcnd.ca/mcndave/lean

meta/definitions/security.php

@@ -0,0 +1,22 @@
+<?php
+
+use function DI\autowire, DI\create, DI\get;
+
+use Storage\Session;
+
+use Taxus\{ Privilege, Taxus, PermissionGrantInterface, DefaultPermissionGrant };
+
+use Psr\Http\Message\ServerRequestInterface;
+
+return [
+    Taxus::class => function ($c) {
+        return ( new Taxus( $c->get(PermissionGrantInterface::class) ) )->add(
+            [ new Privilege("dev", "Is a developper of this application."), "is_dev" ],
+            [ new Privilege("admin", "Can manage mostly everything from this application."), "is_admin" ],
+            [ new Privilege("user", "Is an authenticated user."), "is_user" ],
+            [ new Privilege("anonymous", "Is an anonymous (unauthenticated) user."), "is_anonymous" ],
+        );
+    },
+
+    PermissionGrantInterface::class => create(DefaultPermissionGrant::class)->constructor(get(ServerRequestInterface::class), get(Session::class)),
+];

meta/definitions/software.php

@@ -86,11 +86,11 @@ return [
 
     JavascriptMiddleware::class => create(JavascriptMiddleware::class),
 
-    Cookie::class => create(Cookie::class)->constructor([ 'secure' => true, 'samesite' => 'Strict' ], getenv("LEAN_RANDOM")),
+    Cookie::class => create(Cookie::class)->constructor([ 'secure' => true, 'path' => getenv('URL_BASE'),  ], getenv("LEAN_RANDOM")),
 
-    Session::class => create(Session::class),
+    Session::class => create(Session::class)->constructor(get(Cookie::class), [ 'path' => getenv('URL_BASE'),  ]),
 
-    SessionMiddleware::class => create(SessionMiddleware::class)->constructor(get(Cookie::class), [ 'name' => "lean_sess_" . substr(md5(getenv("LEAN_RANDOM")), 0, 12) ]),
+    SessionMiddleware::class => create(SessionMiddleware::class)->constructor(get(Cookie::class), [  'path' => getenv('URL_BASE'), 'name' => "lean_sess_" . substr(md5(getenv("LEAN_RANDOM")), 0, 12) ]),
 
     'git.commit' => function($c) {
         if ( getenv("DEBUG") ) {