TRF Certest first commit

app/Http/Middleware/Authenticate.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Illuminate\Contracts\Auth\Guard;
+
+class Authenticate
+{
+    public function __construct(private readonly Guard $auth)
+    {
+    }
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if ($this->auth->guest()) {
+            return $request->expectsJson()
+                ? response('Unauthorized.', 401)
+                : redirect()->guest('login');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/CheckIfBanned.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+
+class CheckIfBanned
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if ($request->user() && $request->user()->isBanned()) {
+            abort(403, __('Your account is banned by administrator.'));
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/CheckPermissions.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Illuminate\Contracts\Auth\Guard;
+
+class CheckPermissions
+{
+    public function __construct(protected Guard $auth)
+    {
+    }
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next, $permissions)
+    {
+        if (! is_array($permissions)) {
+            $permissions = explode('|', $permissions);
+        }
+
+        if ($this->auth->guest() || ! $request->user()->hasPermission($permissions)) {
+            abort(403, 'Forbidden.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/CheckRole.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Illuminate\Contracts\Auth\Guard;
+
+class CheckRole
+{
+    public function __construct(protected Guard $auth)
+    {
+    }
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next, $role)
+    {
+        if ($this->auth->guest() || ! $request->user()->hasRole($role)) {
+            abort(403);
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/DatabaseSession.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class DatabaseSession
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        // If we are not using database session driver,
+        // just display 404 page
+        if (config('session.driver') != 'database') {
+            throw new NotFoundHttpException('The entity you are looking for does not exist.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/EncryptCookies.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Illuminate\Cookie\Middleware\EncryptCookies as Middleware;
+
+class EncryptCookies extends Middleware
+{
+    /**
+     * The names of the cookies that should not be encrypted.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/PasswordResetEnabled.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class PasswordResetEnabled
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if (! setting('forgot_password')) {
+            throw new NotFoundHttpException;
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\PreventRequestsDuringMaintenance as Middleware;
+
+class PreventRequestsDuringMaintenance extends Middleware
+{
+    /**
+     * The URIs that should be reachable while maintenance mode is enabled.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/RedirectIfAuthenticated.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Vanguard\Providers\RouteServiceProvider;
+
+class RedirectIfAuthenticated
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @param  string|null  ...$guards
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next, ...$guards)
+    {
+        $guards = empty($guards) ? [null] : $guards;
+
+        foreach ($guards as $guard) {
+            if (Auth::guard($guard)->check()) {
+                return request()->has('to')
+                    ? redirect(request()->get('to'))
+                    : redirect(RouteServiceProvider::HOME);
+            }
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/RegistrationEnabled.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class RegistrationEnabled
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if (! setting('reg_enabled')) {
+            throw new NotFoundHttpException;
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/SetLocale.php

@@ -0,0 +1,60 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Psr\Container\ContainerExceptionInterface;
+use Psr\Container\NotFoundExceptionInterface;
+use Vanguard\Support\Locale;
+
+class SetLocale
+{
+    /**
+     * Handle an incoming request.
+     */
+    public function handle(Request $request, Closure $next): mixed
+    {
+        $locale = $this->getLocale($request);
+
+        app()->setLocale($locale);
+        Carbon::setLocale($locale);
+
+        return $next($request);
+    }
+
+    /**
+     * @throws ContainerExceptionInterface
+     * @throws NotFoundExceptionInterface
+     */
+    private function getLocale(Request $request): string
+    {
+        $newLocale = $request->get('lang');
+
+        if (! $newLocale || ! Locale::validateLocale($newLocale)) {
+            return $this->getSelectedLocale();
+        }
+
+        session()->put('locale', $newLocale);
+
+        return $newLocale;
+    }
+
+    /**
+     * @throws ContainerExceptionInterface
+     * @throws NotFoundExceptionInterface
+     */
+    private function getSelectedLocale(): string
+    {
+        if (session()->has('locale')) {
+            return session()->get('locale');
+        }
+
+        $locale = \Request::getPreferredLanguage(Locale::AVAILABLE_LOCALES) ?? config('app.locale');
+
+        session()->put('locale', $locale);
+
+        return $locale;
+    }
+}

app/Http/Middleware/SocialLogin.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class SocialLogin
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        $provider = $request->route()->parameter('provider');
+
+        if (! in_array($provider, config('auth.social.providers'))) {
+            throw new NotFoundHttpException;
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/TrimStrings.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\TrimStrings as Middleware;
+
+class TrimStrings extends Middleware
+{
+    /**
+     * The names of the attributes that should not be trimmed.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+}

app/Http/Middleware/TrustHosts.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustHosts as Middleware;
+
+class TrustHosts extends Middleware
+{
+    /**
+     * Get the host patterns that should be trusted.
+     *
+     * @return array<int, string|null>
+     */
+    public function hosts()
+    {
+        return [
+            $this->allSubdomainsOfApplicationUrl(),
+        ];
+    }
+}

app/Http/Middleware/TrustProxies.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
+
+class TrustProxies extends Middleware
+{
+    /**
+     * The trusted proxies for this application.
+     *
+     * @var array<int, string>|string|null
+     */
+    protected $proxies;
+
+    /**
+     * The headers that should be used to detect proxies.
+     *
+     * @var int
+     */
+    protected $headers =
+        Request::HEADER_X_FORWARDED_FOR |
+        Request::HEADER_X_FORWARDED_HOST |
+        Request::HEADER_X_FORWARDED_PORT |
+        Request::HEADER_X_FORWARDED_PROTO |
+        Request::HEADER_X_FORWARDED_AWS_ELB;
+}

app/Http/Middleware/TwoFactorEnabled.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class TwoFactorEnabled
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if (! setting('2fa.enabled')) {
+            throw new NotFoundHttpException;
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/UseApiGuard.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Illuminate\Contracts\Auth\Factory;
+
+class UseApiGuard
+{
+    public function __construct(protected Factory $auth)
+    {
+    }
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        $this->auth->shouldUse('sanctum');
+
+        $request->headers->set('Accept', 'application/json');
+
+        return $next($request);
+    }
+}

app/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as BaseVerifier;
+
+class VerifyCsrfToken extends BaseVerifier
+{
+    /**
+     * The URIs that should be excluded from CSRF verification.
+     *
+     * @var array<int, string>
+     */
+    protected $except = [
+        //
+    ];
+}

app/Http/Middleware/VerifyInstallation.php

@@ -0,0 +1,39 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+use Vanguard\Http\Controllers\Web\InstallController;
+
+class VerifyInstallation
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     *
+     * @throws \Symfony\Component\HttpKernel\Exception\HttpException
+     */
+    public function handle($request, Closure $next)
+    {
+        if (app()->environment('testing')) {
+            return $next($request);
+        }
+
+        if (! file_exists(base_path('.env')) && ! $request->is('install*')) {
+            return redirect()->to('install');
+        }
+
+        if (file_exists(base_path('.env')) && $request->is('install*') && ! $request->is('install/complete')) {
+            throw new NotFoundHttpException;
+        }
+
+        if ($request->is('install*') && ! config()->get('app.key')) {
+            config()->set('app.key', InstallController::TMP_APP_KEY);
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/VerifyTwoFactorCode.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace Vanguard\Http\Middleware;
+
+use Closure;
+use Vanguard\Repositories\User\UserRepository;
+
+class VerifyTwoFactorCode
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return mixed
+     *
+     * @throws \Symfony\Component\HttpKernel\Exception\HttpException
+     */
+    public function handle($request, Closure $next)
+    {
+        $user = $this->getUser($request);
+
+        if ($user->two_factor_secret) {
+            return $next($request);
+        }
+
+        abort(404);
+    }
+
+    /**
+     * @return mixed
+     */
+    private function getUser($request)
+    {
+        if ($userId = $request->get('user')) {
+            return app(UserRepository::class)->find($userId);
+        }
+
+        return $request->user();
+    }
+}