create new middleware and connecet setad

This commit is contained in:
2025-08-09 18:22:06 +03:30
committed by amirghasempoor
parent 2fe705e528
commit e6f84b3b6f
7 changed files with 109 additions and 4 deletions

View File

@@ -0,0 +1,28 @@
<?php
namespace App\Http\Controllers\HeadquartersDashboard;
use App\Http\Controllers\Controller;
use App\Models\Province;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
class LoginToProvinceController extends Controller
{
public function loginToProvince(Request $request)
{
$province_ip = Province::query()
->Where('id', '=', $request->province_id)
->value('ip_address');
$payload = [
'user_id' => auth()->user()->id,
'token' => Hash::make(config('globalVariables.LOGIN_HASH_VALUE')),
];
$url = $province_ip . "?" . http_build_query($payload);
return redirect($url);
}
}

View File

@@ -0,0 +1,32 @@
<?php
namespace App\Http\Controllers\ProvinceDashboard;
use App\Http\Controllers\Controller;
use app\Http\Traits\ApiResponse;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
class CheckSetadController extends Controller
{
use ApiResponse;
public function verifyToken(Request $request)
{
if (!Hash::check(config('globalVariables.LOGIN_HASH_VALUE'), $request->token)) {
return $this->errorResponse('Invalid token');
}
$user = User::query()->find($request->user_id);
if (!$user) {
return $this->errorResponse('User not found');
}
Auth::login($user);
return redirect('/');
}
}

View File

@@ -0,0 +1,28 @@
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class VerifySetadIp
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next): Response
{
$masterServerIp = env('MASTER_SERVER_IP');
if (is_null($masterServerIp)) {
return response('Master server IP not configured.', 500);
}
if ($request->ip() !== $masterServerIp) {
return response('Unauthorized.', 401);
}
return $next($request);
}
}