ISMAIL MASSERAN
113 lines
4.4 KiB
PHP
113 lines
4.4 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use Illuminate\Cache\RateLimiting\Limit;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\RateLimiter;
|
|
use Illuminate\Support\ServiceProvider;
|
|
use Illuminate\Support\Str;
|
|
use Illuminate\Validation\ValidationException;
|
|
use Laravel\Fortify\Actions\RedirectIfTwoFactorAuthenticatable;
|
|
use Laravel\Fortify\Contracts\LoginResponse;
|
|
use Laravel\Fortify\Contracts\LogoutResponse;
|
|
use Laravel\Fortify\Contracts\RegisterResponse;
|
|
use Laravel\Fortify\Fortify;
|
|
use Modules\Auth\Actions\Fortify\CreateNewUser;
|
|
use Modules\Auth\Actions\Fortify\LoginResponse as ApiLoginResponse;
|
|
use Modules\Auth\Actions\Fortify\LogoutResponse as ApiLogoutResponse;
|
|
use Modules\Auth\Actions\Fortify\RegisterResponse as ApiRegisterResponse;
|
|
use Modules\Auth\Actions\Fortify\ResetUserPassword;
|
|
use Modules\Auth\Actions\Fortify\UpdateUserPassword;
|
|
use Modules\Auth\Actions\Fortify\UpdateUserProfileInformation;
|
|
use Modules\Auth\Entities\User;
|
|
|
|
class FortifyServiceProvider extends ServiceProvider
|
|
{
|
|
/**
|
|
* Register any application services.
|
|
*/
|
|
public function register(): void
|
|
{
|
|
$this->app->singleton(LoginResponse::class, ApiLoginResponse::class);
|
|
$this->app->singleton(LogoutResponse::class, ApiLogoutResponse::class);
|
|
$this->app->singleton(RegisterResponse::class, ApiRegisterResponse::class);
|
|
}
|
|
|
|
/**
|
|
* Bootstrap any application services.
|
|
*/
|
|
public function boot(): void
|
|
{
|
|
Fortify::createUsersUsing(CreateNewUser::class);
|
|
Fortify::updateUserProfileInformationUsing(UpdateUserProfileInformation::class);
|
|
Fortify::updateUserPasswordsUsing(UpdateUserPassword::class);
|
|
Fortify::resetUserPasswordsUsing(ResetUserPassword::class);
|
|
Fortify::redirectUserForTwoFactorAuthenticationUsing(RedirectIfTwoFactorAuthenticatable::class);
|
|
|
|
RateLimiter::for('login', function (Request $request) {
|
|
$throttleKey = Str::transliterate(Str::lower($request->input(Fortify::username())).'|'.$request->ip());
|
|
|
|
return Limit::perMinute(5)->by($throttleKey);
|
|
});
|
|
|
|
RateLimiter::for('two-factor', function (Request $request) {
|
|
return Limit::perMinute(5)->by($request->session()->get('login.id'));
|
|
});
|
|
|
|
RateLimiter::for('email-verification', function (Request $request) {
|
|
$throttleKey = Str::transliterate($request->route('id', '').'|'.$request->ip());
|
|
|
|
return Limit::perMinute(6)->by($throttleKey);
|
|
});
|
|
|
|
RateLimiter::for('email-verification-resend', function (Request $request) {
|
|
$throttleKey = Str::transliterate(Str::lower($request->input('email', '')).'|'.$request->ip());
|
|
|
|
return Limit::perMinute(1)->by($throttleKey);
|
|
});
|
|
|
|
RateLimiter::for('password-reset-request', function (Request $request) {
|
|
$throttleKey = Str::transliterate(Str::lower($request->input('email', '')).'|'.$request->ip());
|
|
|
|
return Limit::perMinute(1)->by($throttleKey);
|
|
});
|
|
|
|
RateLimiter::for('password-reset', function (Request $request) {
|
|
$throttleKey = Str::transliterate(Str::lower($request->input('email', '')).'|'.$request->ip());
|
|
|
|
return Limit::perMinute(5)->by($throttleKey);
|
|
});
|
|
|
|
RateLimiter::for('phone-verification-send', function (Request $request) {
|
|
$throttleKey = Str::transliterate($request->input('phone_number', '').'|'.$request->ip());
|
|
|
|
return Limit::perMinute(5)->by($throttleKey);
|
|
});
|
|
|
|
RateLimiter::for('phone-verification-verify', function (Request $request) {
|
|
$throttleKey = Str::transliterate($request->input('phone_number', '').'|'.$request->ip());
|
|
|
|
return Limit::perMinute(5)->by($throttleKey);
|
|
});
|
|
|
|
Fortify::authenticateUsing(function (Request $request) {
|
|
$user = User::where('email', $request->email)->first();
|
|
|
|
// Bypass password check in local or development environments
|
|
$shouldBypassPassword = config('app.env', 'local');
|
|
|
|
if ($user && ($shouldBypassPassword || Hash::check($request->password, $user->password))) {
|
|
if (! $user->canAuthenticate()) {
|
|
throw ValidationException::withMessages([
|
|
'email' => [$user->getLoginRestrictionMessage()],
|
|
]);
|
|
}
|
|
|
|
return $user;
|
|
}
|
|
});
|
|
}
|
|
}
|