Files
portal-api/app/Http/Middleware/AuthenticatePortalMonitor.php
2026-10-17 13:04:35 +07:00

28 lines
650 B
PHP

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
class AuthenticatePortalMonitor
{
public function handle(Request $request, Closure $next)
{
$expected = config('portal-monitor.config_api_key');
$provided = $request->header('X-Portal-Monitor-Key');
if (!is_string($expected)
|| $expected === ''
|| !is_string($provided)
|| !hash_equals($expected, $provided)) {
return response()->json([
'error' => true,
'message' => 'Unauthorized',
], 401);
}
return $next($request);
}
}