App\Support\Http\Middleware\VerifyApiToken

Complexity

Total Complexity

11

Size/Duplication

Total Lines	82
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Test Coverage

Coverage

0%

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	isReading()	0	4	1
A	handle()	0	12	4
A	shouldPassThrough()	0	14	4
A	isValidToken()	0	12	2

<?php

namespace App\Support\Http\Middleware;

use App\Support\Helper;
use Closure;
use Illuminate\Auth\Access\AuthorizationException;
use Illuminate\Http\Request;

class VerifyApiToken
{
    /**
     * The URIs that should be excluded from API Token verification.
     *
     * @var array
     */
    protected $except = [];

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     *
     * @throws \Illuminate\Auth\Access\AuthorizationException
     */
    public function handle($request, Closure $next)
    {
        if (
            $this->isReading($request) ||
            $this->shouldPassThrough($request) ||
            $this->isValidToken($request)
        ) {
            return $next($request);
        }

        throw new AuthorizationException('API Token Mismatch');
    }

    /**
     * Determine if the HTTP request uses a ‘read’ verb.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    protected function isReading(Request $request)
    {
        return in_array($request->method(), ['HEAD', 'OPTIONS']);
    }

    /**
     * Determine if the request has a URI that should be passed through verification.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    protected function shouldPassThrough(Request $request)
    {
        foreach ($this->except as $except) {
            if ($except !== '/') {
                $except = trim($except, '/');
            }

            if ($request->is($except)) {
                return true;
            }
        }

        return false;
    }

    /**
     * Determine if the API token is valid.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    protected function isValidToken(Request $request)
    {
        $config = config('support.api.token');

        if ($token = substr($request->header('X-API-TOKEN'), 4)) {
            $timestamp = (int) substr(Helper::sampleDecrypt($token, $config['key']), 4);

            return abs($timestamp - time()) <= (int) $config['valid_interval'];
        }

        return false;
    }
}