Merge branch 'feature/BundingBossRoute' into 'develop'

create new middleware and connecet setad

See merge request witel-back-end/crm!19
This commit is contained in:
2025-08-10 05:20:45 +00:00
7 changed files with 109 additions and 4 deletions

View File

@@ -69,3 +69,4 @@ VITE_APP_NAME="${APP_NAME}"
TRUSTED_IP="127.0.0.1"
NOTIFICATION_SERVER_URL=
LOGIN_HASH_VALUE=

View File

@@ -0,0 +1,28 @@
<?php
namespace App\Http\Controllers\HeadquartersDashboard;
use App\Http\Controllers\Controller;
use App\Models\Province;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
class LoginToProvinceController extends Controller
{
public function loginToProvince(Request $request)
{
$province_ip = Province::query()
->Where('id', '=', $request->province_id)
->value('ip_address');
$payload = [
'user_id' => auth()->user()->id,
'token' => Hash::make(config('globalVariables.LOGIN_HASH_VALUE')),
];
$url = $province_ip . "?" . http_build_query($payload);
return redirect($url);
}
}

View File

@@ -0,0 +1,32 @@
<?php
namespace App\Http\Controllers\ProvinceDashboard;
use App\Http\Controllers\Controller;
use app\Http\Traits\ApiResponse;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
class CheckSetadController extends Controller
{
use ApiResponse;
public function verifyToken(Request $request)
{
if (!Hash::check(config('globalVariables.LOGIN_HASH_VALUE'), $request->token)) {
return $this->errorResponse('Invalid token');
}
$user = User::query()->find($request->user_id);
if (!$user) {
return $this->errorResponse('User not found');
}
Auth::login($user);
return redirect('/');
}
}

View File

@@ -0,0 +1,28 @@
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class VerifySetadIp
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next): Response
{
$masterServerIp = env('MASTER_SERVER_IP');
if (is_null($masterServerIp)) {
return response('Master server IP not configured.', 500);
}
if ($request->ip() !== $masterServerIp) {
return response('Unauthorized.', 401);
}
return $next($request);
}
}

View File

@@ -19,6 +19,7 @@ return Application::configure(basePath: dirname(__DIR__))
$middleware->statefulApi()->alias([
'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,
'permission' => \Spatie\Permission\Middleware\PermissionMiddleware::class,
'setadIp' => \App\Http\Middleware\VerifySetadIp::class,
]);
})
->withExceptions(function (Exceptions $exceptions) {

View File

@@ -2,5 +2,6 @@
return [
'TRUSTED_IP' => explode(',', env("TRUSTED_IP", '127.0.0.1')),
'NOTIFICATION_SERVER_URL' => env('NOTIFICATION_SERVER_URL', '127.0.0.1')
'NOTIFICATION_SERVER_URL' => env('NOTIFICATION_SERVER_URL', '127.0.0.1'),
'LOGIN_HASH_VALUE' => env('LOGIN_HASH_VALUE'),
];

View File

@@ -6,16 +6,15 @@ use App\Http\Controllers\Admin\UserManagementController;
use App\Http\Controllers\AuthController;
use App\Http\Controllers\CallController;
use App\Http\Controllers\CategoryController;
use App\Http\Controllers\HeadquartersDashboard\LoginToProvinceController;
use App\Http\Controllers\ProfileController;
use App\Http\Controllers\ProvinceController;
use App\Http\Controllers\HeadquartersDashboard\CumulativeCentersStatsController;
use App\Http\Controllers\HeadquartersDashboard\CumulativeKeypressStatsController;
use App\Http\Controllers\HeadquartersDashboard\CumulativeMessageRatingStatsController;
use App\Http\Controllers\HeadquartersDashboard\CumulativeVoiceRatingStatsController;
use App\Http\Controllers\ProvinceDashboard\OperatorDialogues\OperatorController;
use App\Http\Controllers\ProvinceDashboard\OperatorDialogues\SupervisorController;
use App\Http\Controllers\ProvinceDashboard\CheckSetadController;
use App\Http\Middleware\SuperAdminCheck;
use App\Models\OperatorDialogue;
use Illuminate\Support\Facades\Route;
Route::prefix('server')->group(function () {
@@ -204,4 +203,19 @@ Route::prefix('server')->group(function () {
Route::get('/{peopleMessage}', 'show')->name('show');
});
});
Route::middleware(['auth', 'permission:setat_ip'])
->prefix('login_to_province')
->name('loginToProvince.')
->controller(LoginToProvinceController::class)
->group(function () {
Route::post('/', 'loginToProvince')->name('loginToProvince');
});
Route::middleware('auth')
->prefix('check_setad')
->name('checkSetad.')
->controller(CheckSetadController::class)
->group(function () {
Route::get('/', 'verifyToken')->name('verifyToken');
});
});