invoiceninja/app/Http/Middleware/ApiSecretCheck.php
2019-03-27 15:50:13 +11:00

35 lines
713 B
PHP

<?php
namespace App\Http\Middleware;
use App\Models\User;
use Closure;
use Illuminate\Support\Facades\Log;
class ApiSecretCheck
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
if( $request->header('X-API-SECRET') && ($request->header('X-API-SECRET') == config('ninja.api_secret')) )
{
return $next($request);
}
else {
$error['error'] = ['message' => 'Invalid secret'];
return response()->json(json_encode($error, JSON_PRETTY_PRINT) ,403);
}
}
}