7 Commits

Author	SHA1	Message	Date
Dan Brown	70f39757b1	Updated API auth handling of email confirmations ... Email confirmations are now done within the guard during auth checking instead of at the middleware layer.	2021-08-05 22:07:08 +01:00
Dan Brown	934a833818	Apply fixes from StyleCI	2021-06-26 15:23:15 +00:00
Dan Brown	98a1e57ba9	Ran phpcbf and updated phpcs.xml	2021-03-07 22:24:05 +00:00
Dan Brown	3cacda6762	Added expiry checking to API token auth ... - Added test to cover to ensure its checked going forward	2019-12-30 19:51:41 +00:00
Dan Brown	3d11cba223	Added testing coverage to API token auth	2019-12-30 19:42:46 +00:00
Dan Brown	6f1b88a6a6	Change email confirmation from own middle to trait ... Email confirmation middleware caused more mess than good, As caused priority issues and it depended on auth actions. Instead its now a trai used on auth middlewares. Also used 'EncryptCookies' middleware on API instead of custom decryption in custom middleware since we'd need to do replicate all the same actions anyway. Shouldn't have too much effect since it only actions over cookies that exist, of which none should be there for most API requests. Also split out some large guard functions to be a little more readable and appease codeclimate.	2019-12-30 15:49:20 +00:00
Dan Brown	349b4629be	Extracted API auth into guard ... Also implemented more elegant solution to allowing session auth for API routes; A new 'StartSessionIfCookieExists' middleware, which wraps the default 'StartSession' middleware will run for API routes which only sets up the session if a session cookie is found on the request. Also decrypts only the session cookie. Also cleaned some TokenController codeclimate warnings.	2019-12-30 14:51:28 +00:00