Deon George
db4b90183f
All checks were successful
Create Docker Image / Test Application (x86_64) (push) Successful in 37s
Create Docker Image / Build Docker Image (x86_64) (push) Successful in 1m23s
Create Docker Image / Build Docker Image (arm64) (push) Successful in 3m29s
Create Docker Image / Final Docker Image Manifest (push) Successful in 11s
50 lines
1.8 KiB
PHP
50 lines
1.8 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Config;
|
|
use Illuminate\Support\Facades\Cookie;
|
|
use Illuminate\Support\Facades\Log;
|
|
use LdapRecord\Container;
|
|
|
|
use App\Ldap\Connection;
|
|
|
|
class SwapinAuthUser
|
|
{
|
|
/**
|
|
* Handle an incoming request.
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @param \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse) $next
|
|
* @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
|
|
* @throws \LdapRecord\Configuration\ConfigurationException
|
|
*/
|
|
public function handle(Request $request,Closure $next): mixed
|
|
{
|
|
$key = config('ldap.default');
|
|
|
|
/*
|
|
// Rebuild our connection with the authenticated user.
|
|
if (Session::has('username_encrypt') && Session::has('password_encrypt')) {
|
|
Config::set('ldap.connections.'.$key.'.username',Crypt::decryptString(Session::get('username_encrypt')));
|
|
Config::set('ldap.connections.'.$key.'.password',Crypt::decryptString(Session::get('password_encrypt')));
|
|
|
|
} else
|
|
*/
|
|
|
|
// @todo it seems sometimes we have cookies that show the logged in user, but Auth::user() has expired?
|
|
if (Cookie::has('username_encrypt') && Cookie::has('password_encrypt')) {
|
|
Config::set('ldap.connections.'.$key.'.username',Cookie::get('username_encrypt'));
|
|
Config::set('ldap.connections.'.$key.'.password',Cookie::get('password_encrypt'));
|
|
|
|
Log::debug('Swapping out configured LDAP credentials with the user\'s cookie.',['key'=>$key,'user'=>Cookie::get('username_encrypt')]);
|
|
|
|
// We need to override our Connection object so that we can store and retrieve the logged in user and swap out the credentials to use them.
|
|
Container::getInstance()->addConnection(new Connection(config('ldap.connections.'.$key)),$key);
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
} |