eagle.ead.lmsestudio.com.br

UnknownSec Bypass 403

: /mnt/lmsestudio-instance-vol002/lms_3c402fd9d559/app/Http/Controllers/Api/ [ drwxr-xr-x ]
name : ApiController.php
 <?php

namespace EstudioLMS\Http\Controllers\Api;

use EstudioLMS\Repositories\Config\SaasConfigInterface;
use Illuminate\Http\Request;
use EstudioLMS\Http\Requests;
use EstudioLMS\Http\Controllers\Controller;
use Illuminate\Support\Str;

/**
 * Class ApiController
 * @package EstudioLMS\Http\Controllers\Api
 */
class ApiController extends Controller
{
    /**
     * @var SaasConfigInterface
     */
    private $saasConfig;

    /**
     * ApiController constructor.
     * @param SaasConfigInterface $saasConfig
     */
    public function __construct(
        SaasConfigInterface $saasConfig
    )
    {
        $this->saasConfig = $saasConfig;
    }

    /**
     * @return array
     */
    public function verify()
    {
        return ['success' => true];
    }

    /**
     * @param Request $request
     * @return \Illuminate\Http\JsonResponse
     */
    public function getKey(Request $request)
    {
        $header = $request->header('authorization');
        if (!empty($header)) {
            if (Str::startsWith($header, 'Bearer ')) {
                $header = Str::substr($header, 7);
            }
        }
        $data = $request->all();
        $check = $this->saasConfig->findWhere([
            ['tenant_id', '=', $header]
        ])->first();

        if ($check) {
            return response()->json([
                'key' => config('app.key'),
                'message' => 'Success'
            ], 200);
        } else {
            return response()->json([
                'key' => null,
                'message' => 'Tentativa de acesso inválida...'
            ], 401);
        }
    }
}