PriceyBot/PriceyBotPanel
Archived
5
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects 1 Releases 4 Wiki Activity

Merge pull request 'fix/headerauth-crash-missing-header' (#19) from fix/headerauth-crash-missing-header into master

Browse Source 
Reviewed-on: #19
This commit is contained in:
Benjamyn Love 2023-10-11 00:58:54 -04:00
commit 84529c373d
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Middleware/HeaderAuth.php
View File

@ -15,6 +15,10 @@ class HeaderAuth
*/ */
public function handle(Request $request, Closure $next): Response public function handle(Request $request, Closure $next): Response
{ {
if (! $request->hasHeader('X-BOTAUTH')) {
return response()
->json(["status" => false, "message" => "Unauthorized."], 401);
}
if (!hash_equals(config('bot.header_auth'), $request->header('X-BOTAUTH'))) { if (!hash_equals(config('bot.header_auth'), $request->header('X-BOTAUTH'))) {
return response('Unauthorized', 401); return response('Unauthorized', 401);
} }