Files
moonwell-web/app/Http/Middleware/EnsureGameServer.php
T

23 lines
594 B
PHP

<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class EnsureGameServer
{
public function handle(Request $request, Closure $next): Response
{
$expected = (string) config('services.game_server.balance_api_token');
$provided = (string) $request->bearerToken();
if ($expected === '' || $provided === '' || ! hash_equals($expected, $provided)) {
abort(401, 'Неверный токен игрового сервера.');
}
return $next($request);
}
}