eagle.ead.lmsestudio.com.br

UnknownSec Bypass 403

: /mnt/lmsestudio-instance-vol002/lms_38fd6f5cb449/app/Http/Middleware/ [ drwxr-xr-x ]
name : AuthenticateOwner.php
 <?php

namespace EstudioLMS\Http\Middleware;

use Closure;
use EstudioLMS\Repositories\Config\ConfigRepository;
use Illuminate\Contracts\Auth\Guard;
use Request;
use Symfony\Component\HttpFoundation\Session\SessionInterface;

/**
 * Class Authenticate
 * @package EstudioLMS\Http\Middleware
 */
class AuthenticateOwner
{

    /**
     * The Guard implementation.
     *
     * @var Guard
     */
    protected $auth;
    /**
     * @var ConfigRepository
     */
    private $configRepository;
    /**
     * @var SessionInterface
     */
    private $session;

    /**
     * Create a new filter instance.
     *
     * @param  Guard $auth
     * @param ConfigRepository $configRepository
     * @param SessionInterface $session
     */
    public function __construct(
        Guard $auth,
        ConfigRepository $configRepository,
        SessionInterface $session
    )
    {
        $this->auth = $auth;
        $this->configRepository = $configRepository;
        $this->session = $session;
    }

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param  \Closure $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $config = $this->configRepository->firstRecord();
        if ($this->auth->guest()) {
            if ($request->ajax()) {
                return \Response::view('errors.401');
            } else {
                if (!Request::wantsJson()) {
                    return redirect()->guest('/auth');
                }
            }
        }

        if ($this->auth->user()['roles'][0]['name'] === 'owner') {
            if ($config['simultaneous_access'] && !$this->session->has('admin-mail')) {
                if ($this->session->has('login_token') &&
                    $this->session->get('login_token') == $this->auth->user()['login_token']
                ) {
                    return $next($request);
                } else {
                    return redirect(url('auth/logout'));
                }
            } else {
                return $next($request);
            }
        }
        return \Response::view('errors.401');
    }
}