- Added a new CookieAuthentication middleware

This commit is contained in:
Dave Mc Nicoll committed 2026-10-20 11:57:30 +00:00
1 parent 0eaaf79ad8
commit 6a24bcad76
6 files changed
+76 -13

No files matched your search

+7 -8
View File
@@ -13,15 +13,11 @@ class BearerMethod implements MethodInterface
protected JsonWebTokenDecoder $jwt;
public function __construct(
# protected Authenticate $authorize,
# protected UserInterface $user,
protected string $token
) {}
public function execute(ServerRequestInterface $request) : ServerRequestInterface
{
# $this->authorize->user = $this->user;
switch($this->autodetectTokenType()) {
case BearerTokenTypeEnum::JsonWebToken:
$this->jwt->decode();
@@ -35,7 +31,7 @@ class BearerMethod implements MethodInterface
->withAttribute('authentication_middleware:user_id', $payload['sub']);
}
else {
throw new \InvalidArgumentException("Given JsonWebToken is missing a 'sub' key (which concords to user id)");
throw new \InvalidArgumentException("Given JsonWebToken is missing a 'sub' key (which match with a user's id)");
}
break;
@@ -52,11 +48,14 @@ class BearerMethod implements MethodInterface
public function autodetectTokenType() : BearerTokenTypeEnum
{
$this->jwt = new JsonWebTokenDecoder($this->token, getenv('LEAN_RANDOM'));
try {
$this->jwt = new JsonWebTokenDecoder($this->token, hash('sha512', getenv('LEAN_RANDOM')));
if ( $this->jwt->isJWT() ) {
return BearerTokenTypeEnum::JsonWebToken;
if ( $this->jwt->isJWT() ) {
return BearerTokenTypeEnum::JsonWebToken;
}
}
catch(\Throwable $ex) {/* Not a JWT */}
return BearerTokenTypeEnum::UniqueKey;
}