whisper-money/app/Http/Middleware/HorizonBasicAuth.php

37 lines
951 B
PHP

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class HorizonBasicAuth
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next): Response
{
$username = config('horizon.basic_auth_username');
$password = config('horizon.basic_auth_password');
if (empty($username) || empty($password)) {
return $next($request);
}
$authUser = $request->getUser();
$authPassword = $request->getPassword();
if ($authUser !== $username || $authPassword !== $password) {
return response('Unauthorized', 401, [
'WWW-Authenticate' => 'Basic realm="Horizon"',
]);
}
return $next($request);
}
}