36 lines
982 B
PHP
36 lines
982 B
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class HostAccessMiddleware
|
|
{
|
|
/**
|
|
* @param Closure(Request): Response $next
|
|
*/
|
|
public function handle(Request $request, Closure $next): Response
|
|
{
|
|
$host = strtolower(trim($request->getHost(), '[]'));
|
|
$adminHost = strtolower((string) config('toolbox.admin_host', 'toolbox.local'));
|
|
|
|
if ($host === $adminHost) {
|
|
return $next($request);
|
|
}
|
|
|
|
if (filter_var($host, FILTER_VALIDATE_IP) === false || ! $this->isPublicDiagnosisRequest($request)) {
|
|
abort(404);
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
|
|
private function isPublicDiagnosisRequest(Request $request): bool
|
|
{
|
|
return ($request->isMethod('GET') && $request->is('production-diagnosis'))
|
|
|| ($request->isMethod('POST') && $request->is('api/production-diagnosis/diagnose'));
|
|
}
|
|
}
|