Add ApiKey service, cleanup old API key methods
https://zube.io/pterodactyl/panel/c/525
This commit is contained in:
parent
2235481765
commit
4ee9d38ad1
10 changed files with 569 additions and 85 deletions
|
@ -24,7 +24,6 @@
|
|||
|
||||
namespace Pterodactyl\Http\Requests\Admin;
|
||||
|
||||
use Pterodactyl\Models\User;
|
||||
use Illuminate\Foundation\Http\FormRequest;
|
||||
|
||||
abstract class AdminFormRequest extends FormRequest
|
||||
|
@ -37,7 +36,7 @@ abstract class AdminFormRequest extends FormRequest
|
|||
*/
|
||||
public function authorize()
|
||||
{
|
||||
if (! $this->user() instanceof User) {
|
||||
if (is_null($this->user())) {
|
||||
return false;
|
||||
}
|
||||
|
||||
|
|
89
app/Http/Requests/ApiKeyRequest.php
Normal file
89
app/Http/Requests/ApiKeyRequest.php
Normal file
|
@ -0,0 +1,89 @@
|
|||
<?php
|
||||
/*
|
||||
* Pterodactyl - Panel
|
||||
* Copyright (c) 2015 - 2017 Dane Everitt <dane@daneeveritt.com>.
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
* of this software and associated documentation files (the "Software"), to deal
|
||||
* in the Software without restriction, including without limitation the rights
|
||||
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
* copies of the Software, and to permit persons to whom the Software is
|
||||
* furnished to do so, subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
* SOFTWARE.
|
||||
*/
|
||||
|
||||
namespace Pterodactyl\Http\Requests;
|
||||
|
||||
use IPTools\Network;
|
||||
|
||||
class ApiKeyRequest extends BaseFormRequest
|
||||
{
|
||||
/**
|
||||
* Rules applied to data passed in this request.
|
||||
*
|
||||
* @return array
|
||||
*/
|
||||
public function rules()
|
||||
{
|
||||
$this->parseAllowedIntoArray();
|
||||
|
||||
return [
|
||||
'memo' => 'required|nullable|string|max:500',
|
||||
'permissions' => 'sometimes|present|array',
|
||||
'admin_permissions' => 'sometimes|present|array',
|
||||
'allowed_ips' => 'present',
|
||||
'allowed_ips.*' => 'sometimes|string',
|
||||
];
|
||||
}
|
||||
|
||||
/**
|
||||
* Parse the string of allowed IPs into an array.
|
||||
*/
|
||||
protected function parseAllowedIntoArray()
|
||||
{
|
||||
$loop = [];
|
||||
if (! empty($this->input('allowed_ips'))) {
|
||||
foreach (explode(PHP_EOL, $this->input('allowed_ips')) as $ip) {
|
||||
$loop[] = trim($ip);
|
||||
}
|
||||
}
|
||||
|
||||
$this->merge(['allowed_ips' => $loop], $this->except('allowed_ips'));
|
||||
}
|
||||
|
||||
/**
|
||||
* Run additional validation rules on the request to ensure all of the data is good.
|
||||
*
|
||||
* @param \Illuminate\Validation\Validator $validator
|
||||
*/
|
||||
public function withValidator($validator)
|
||||
{
|
||||
$validator->after(function ($validator) {
|
||||
if (empty($this->input('permissions')) && empty($this->input('admin_permissions'))) {
|
||||
$validator->errors()->add('permissions', 'At least one permission must be selected.');
|
||||
}
|
||||
});
|
||||
|
||||
$validator->after(function ($validator) {
|
||||
foreach ($this->input('allowed_ips') as $ip) {
|
||||
$ip = trim($ip);
|
||||
|
||||
try {
|
||||
Network::parse($ip);
|
||||
} catch (\Exception $ex) {
|
||||
$validator->errors()->add('allowed_ips', 'Could not parse IP ' . $ip . ' because it is in an invalid format.');
|
||||
}
|
||||
}
|
||||
});
|
||||
}
|
||||
}
|
53
app/Http/Requests/BaseFormRequest.php
Normal file
53
app/Http/Requests/BaseFormRequest.php
Normal file
|
@ -0,0 +1,53 @@
|
|||
<?php
|
||||
/*
|
||||
* Pterodactyl - Panel
|
||||
* Copyright (c) 2015 - 2017 Dane Everitt <dane@daneeveritt.com>.
|
||||
*
|
||||
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
* of this software and associated documentation files (the "Software"), to deal
|
||||
* in the Software without restriction, including without limitation the rights
|
||||
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
* copies of the Software, and to permit persons to whom the Software is
|
||||
* furnished to do so, subject to the following conditions:
|
||||
*
|
||||
* The above copyright notice and this permission notice shall be included in all
|
||||
* copies or substantial portions of the Software.
|
||||
*
|
||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
* SOFTWARE.
|
||||
*/
|
||||
|
||||
namespace Pterodactyl\Http\Requests;
|
||||
|
||||
use Illuminate\Foundation\Http\FormRequest;
|
||||
|
||||
class BaseFormRequest extends FormRequest
|
||||
{
|
||||
/**
|
||||
* Determine if a user is authorized to access this endpoint.
|
||||
*
|
||||
* @return bool
|
||||
*/
|
||||
public function authorize()
|
||||
{
|
||||
return ! is_null($this->user());
|
||||
}
|
||||
|
||||
/**
|
||||
* Return only the fields that we are interested in from the request.
|
||||
* This will include empty fields as a null value.
|
||||
*
|
||||
* @return array
|
||||
*/
|
||||
public function normalize()
|
||||
{
|
||||
return $this->only(
|
||||
array_keys($this->rules())
|
||||
);
|
||||
}
|
||||
}
|
Reference in a new issue