@@ -39,8 +39,8 @@ discard block |
||
| 39 | 39 | $graph = new \Microsoft\Graph\Graph(); |
| 40 | 40 | $graph->setAccessToken($accessToken); |
| 41 | 41 | $user = $graph->createRequest("GET", "/me") |
| 42 | - ->setReturnType(\Microsoft\Graph\Model\User::class) |
|
| 43 | - ->execute(); |
|
| 42 | + ->setReturnType(\Microsoft\Graph\Model\User::class) |
|
| 43 | + ->execute(); |
|
| 44 | 44 | |
| 45 | 45 | return $user->jsonSerialize(); |
| 46 | 46 | } |
@@ -131,9 +131,9 @@ discard block |
||
| 131 | 131 | if (count($groups)) { |
| 132 | 132 | // remove the users existing database roles before assigning new ones |
| 133 | 133 | \DB::table('assigned_roles') |
| 134 | - ->where('entity_id', $user->id) |
|
| 135 | - ->where('entity_type', get_class($user)) |
|
| 136 | - ->delete(); |
|
| 134 | + ->where('entity_id', $user->id) |
|
| 135 | + ->where('entity_type', get_class($user)) |
|
| 136 | + ->delete(); |
|
| 137 | 137 | // add the user to each group they are assigned |
| 138 | 138 | $user->assign($groups); |
| 139 | 139 | } |
@@ -48,7 +48,7 @@ discard block |
||
| 48 | 48 | public function scrubMicrosoftGraphUserData($userData) |
| 49 | 49 | { |
| 50 | 50 | // Fix any stupid crap with missing or null fields |
| 51 | - if (! isset($userData['mail']) || !$userData['mail']) { |
|
| 51 | + if (!isset($userData['mail']) || !$userData['mail']) { |
|
| 52 | 52 | $userData['mail'] = $userData['userPrincipalName']; |
| 53 | 53 | } |
| 54 | 54 | |
@@ -69,7 +69,7 @@ discard block |
||
| 69 | 69 | // Try to find an existing user |
| 70 | 70 | $user = $userType::where($userIdField, $userData['id'])->first(); |
| 71 | 71 | // If we dont have an existing user |
| 72 | - if (! $user) { |
|
| 72 | + if (!$user) { |
|
| 73 | 73 | // Go create a new one with this data |
| 74 | 74 | $UserFactory = new UserFactory(); |
| 75 | 75 | $user = $UserFactory->convertAzureUser($userData); |
@@ -81,7 +81,7 @@ discard block |
||
| 81 | 81 | public function certAuth() |
| 82 | 82 | { |
| 83 | 83 | // Make sure we got a client certificate from the web server |
| 84 | - if (! $_SERVER['SSL_CLIENT_CERT']) { |
|
| 84 | + if (!$_SERVER['SSL_CLIENT_CERT']) { |
|
| 85 | 85 | throw new \Exception('TLS client certificate missing'); |
| 86 | 86 | } |
| 87 | 87 | // try to parse the certificate we got |
@@ -90,7 +90,7 @@ discard block |
||
| 90 | 90 | $asciicert = str_replace("\t", '', $_SERVER['SSL_CLIENT_CERT']); |
| 91 | 91 | $cert = $x509->loadX509($asciicert); |
| 92 | 92 | $names = $x509->getExtension('id-ce-subjectAltName'); |
| 93 | - if (! $names) { |
|
| 93 | + if (!$names) { |
|
| 94 | 94 | throw new \Exception('TLS client cert missing subject alternative names'); |
| 95 | 95 | } |
| 96 | 96 | // Search subject alt names for user principal name |
@@ -104,12 +104,12 @@ discard block |
||
| 104 | 104 | } |
| 105 | 105 | } |
| 106 | 106 | } |
| 107 | - if (! $upn) { |
|
| 107 | + if (!$upn) { |
|
| 108 | 108 | throw new \Exception('Could not find user principal name in TLS client cert'); |
| 109 | 109 | } |
| 110 | 110 | $user_class = config('enterpriseauth.user_class'); |
| 111 | 111 | $user = $user_class::where('userPrincipalName', $upn)->first(); |
| 112 | - if (! $user) { |
|
| 112 | + if (!$user) { |
|
| 113 | 113 | throw new \Exception('No user found with user principal name '.$upn); |
| 114 | 114 | } |
| 115 | 115 | //dd($user); |
@@ -123,7 +123,7 @@ discard block |
||
| 123 | 123 | |
| 124 | 124 | // Process group data into a list of displayNames we use as roles |
| 125 | 125 | $groups = []; |
| 126 | - foreach($groupData as $info) { |
|
| 126 | + foreach ($groupData as $info) { |
|
| 127 | 127 | $groups[] = $info['displayName']; |
| 128 | 128 | } |
| 129 | 129 | |
@@ -39,8 +39,8 @@ discard block |
||
| 39 | 39 | public function buildAuthUrl() |
| 40 | 40 | { |
| 41 | 41 | $url = $this->azureActiveDirectory->authorizationEndpoint |
| 42 | - . '?' |
|
| 43 | - . $this->buildAuthUrlQueryString(); |
|
| 42 | + . '?' |
|
| 43 | + . $this->buildAuthUrlQueryString(); |
|
| 44 | 44 | |
| 45 | 45 | return $url; |
| 46 | 46 | } |
@@ -70,7 +70,7 @@ discard block |
||
| 70 | 70 | |
| 71 | 71 | // Check to see if there is an intended destination url saved |
| 72 | 72 | $destination = $request->session() |
| 73 | - ->get('oauthIntendedUrl'); |
|
| 73 | + ->get('oauthIntendedUrl'); |
|
| 74 | 74 | // If there is no intended destination url, use the default |
| 75 | 75 | if (! $destination) { |
| 76 | 76 | $destination = config('enterpriseauth.redirect_on_login'); |
@@ -96,7 +96,7 @@ discard block |
||
| 96 | 96 | 'client_secret' => env('AZURE_AD_CLIENT_SECRET'), |
| 97 | 97 | 'redirect_uri' => ENV('AZURE_AD_CALLBACK_URL'), |
| 98 | 98 | 'grant_type' => 'authorization_code', |
| 99 | - ] |
|
| 99 | + ] |
|
| 100 | 100 | ]; |
| 101 | 101 | $response = $guzzle->post($url, $parameters); |
| 102 | 102 | $responseObject = json_decode($response->getBody()); |
@@ -72,7 +72,7 @@ |
||
| 72 | 72 | $destination = $request->session() |
| 73 | 73 | ->get('oauthIntendedUrl'); |
| 74 | 74 | // If there is no intended destination url, use the default |
| 75 | - if (! $destination) { |
|
| 75 | + if (!$destination) { |
|
| 76 | 76 | $destination = config('enterpriseauth.redirect_on_login'); |
| 77 | 77 | } |
| 78 | 78 | \Illuminate\Support\Facades\Log::info('AUTH success USER ID '.$user->id.' with redirect url '.$destination); |
@@ -56,7 +56,7 @@ |
||
| 56 | 56 | $roles = $user->roles()->get()->all(); |
| 57 | 57 | foreach ($roles as $key => $role) { |
| 58 | 58 | $role->permissions = $role->abilities()->get()->all(); |
| 59 | - if (! count($role->permissions)) { |
|
| 59 | + if (!count($role->permissions)) { |
|
| 60 | 60 | unset($roles[$key]); |
| 61 | 61 | } |
| 62 | 62 | } |
@@ -15,27 +15,27 @@ discard block |
||
| 15 | 15 | { |
| 16 | 16 | // Make sure nobody is including or running this thing without all the required env settings |
| 17 | 17 | $requiredVariables = ['AZURE_AD_CLIENT_ID', 'AZURE_AD_CLIENT_SECRET', 'AZURE_AD_TENANT', 'AZURE_AD_CALLBACK_URL']; |
| 18 | - foreach($requiredVariables as $env) { |
|
| 19 | - if (! env($env)) { |
|
| 18 | + foreach ($requiredVariables as $env) { |
|
| 19 | + if (!env($env)) { |
|
| 20 | 20 | throw new \Exception('enterpriseauth setup error: missing mandatory .env value for '.$env); |
| 21 | 21 | } |
| 22 | 22 | } |
| 23 | 23 | |
| 24 | 24 | // Actually I have my own oauth token cache based authentication guard now lol |
| 25 | 25 | config(['auth.guards.api.driver' => 'oauthtoken']); |
| 26 | - Auth::extend('oauthtoken', function ($app, $name, array $config) { |
|
| 26 | + Auth::extend('oauthtoken', function($app, $name, array $config) { |
|
| 27 | 27 | return new OauthTokenGuard(Auth::createUserProvider($config['provider']), $app->make('request')); |
| 28 | 28 | }); |
| 29 | 29 | |
| 30 | 30 | // Make sure that this vendor dir and the routes dir are in any scanned paths for swagger documentation |
| 31 | 31 | $swaggerScanPaths = config('l5-swagger.paths.annotations'); |
| 32 | - if (! is_array($swaggerScanPaths)) { |
|
| 32 | + if (!is_array($swaggerScanPaths)) { |
|
| 33 | 33 | $swaggerScanPaths = [$swaggerScanPaths]; |
| 34 | 34 | } |
| 35 | - if (! in_array(base_path('routes'), $swaggerScanPaths)) { |
|
| 35 | + if (!in_array(base_path('routes'), $swaggerScanPaths)) { |
|
| 36 | 36 | $swaggerScanPaths[] = base_path('routes'); |
| 37 | 37 | } |
| 38 | - if (! in_array(__DIR__.'/../routes/', $swaggerScanPaths)) { |
|
| 38 | + if (!in_array(__DIR__.'/../routes/', $swaggerScanPaths)) { |
|
| 39 | 39 | $swaggerScanPaths[] = __DIR__.'/../routes/'; |
| 40 | 40 | } |
| 41 | 41 | config(['l5-swagger.paths.annotations' => $swaggerScanPaths]); |
@@ -65,7 +65,7 @@ discard block |
||
| 65 | 65 | { |
| 66 | 66 | // If the routes files for the swagger oauth config is NOT present, and we have all the right info, then generate it really quick |
| 67 | 67 | $swaggerAzureadFile = __DIR__.'/../routes/swagger.azuread.php'; |
| 68 | - if (! file_exists($swaggerAzureadFile)) { |
|
| 68 | + if (!file_exists($swaggerAzureadFile)) { |
|
| 69 | 69 | $aad = new AzureActiveDirectory(env('AZURE_AD_TENANT')); |
| 70 | 70 | //$authorizationUrl = $aad->authorizationEndpoint . '?resource=https://graph.microsoft.com'; |
| 71 | 71 | $authorizationUrl = $aad->authorizationEndpoint; |
@@ -1,14 +1,14 @@ |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | -Route::middleware([config('enterpriseauth.routes.middleware')])->group(function () { |
|
| 3 | +Route::middleware([config('enterpriseauth.routes.middleware')])->group(function() { |
|
| 4 | 4 | Route::get(config('enterpriseauth.routes.login'), 'Metaclassing\EnterpriseAuth\Controllers\WebAuthController@redirectToOauthProvider'); |
| 5 | 5 | Route::get(config('enterpriseauth.routes.callback'), 'Metaclassing\EnterpriseAuth\Controllers\WebAuthController@handleOauthResponse'); |
| 6 | 6 | |
| 7 | 7 | // This handles a situation where a route with the NAME of login does not exist, we define it to keep from breaking framework redirects hard coded |
| 8 | - if (! \Route::has('login')) { |
|
| 8 | + if (!\Route::has('login')) { |
|
| 9 | 9 | Route::get('login', 'Metaclassing\EnterpriseAuth\Controllers\WebAuthController@loginOrRegister')->name('login'); |
| 10 | 10 | } |
| 11 | - if (! \Route::has('register')) { |
|
| 11 | + if (!\Route::has('register')) { |
|
| 12 | 12 | Route::get('register', 'Metaclassing\EnterpriseAuth\Controllers\WebAuthController@loginOrRegister')->name('register'); |
| 13 | 13 | } |
| 14 | 14 | }); |
@@ -1,7 +1,7 @@ |
||
| 1 | 1 | <?php |
| 2 | 2 | |
| 3 | 3 | // Authenticated user information routes |
| 4 | -Route::middleware([config('enterpriseauth.apiroutes.middleware'), config('enterpriseauth.apiroutes.authmiddleware')])->group(function () { |
|
| 4 | +Route::middleware([config('enterpriseauth.apiroutes.middleware'), config('enterpriseauth.apiroutes.authmiddleware')])->group(function() { |
|
| 5 | 5 | |
| 6 | 6 | /** |
| 7 | 7 | * @SWG\Get( |