mirror of
https://github.com/firefly-iii/firefly-iii.git
synced 2024-11-23 09:26:29 -06:00
105 lines
2.5 KiB
PHP
105 lines
2.5 KiB
PHP
<?php
|
|
|
|
|
|
|
|
App::before(
|
|
function ($request) {
|
|
|
|
// put IP in session if not already there.
|
|
|
|
$reminders = [];
|
|
|
|
if (Auth::check()) {
|
|
Filter::setSessionDateRange();
|
|
Reminders::updateReminders();
|
|
Steam::removeEmptyBudgetLimits();
|
|
$reminders = Reminders::getReminders();
|
|
}
|
|
View::share('reminders', $reminders);
|
|
|
|
}
|
|
);
|
|
|
|
App::after(
|
|
function ($request, $response) {
|
|
//
|
|
}
|
|
);
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Authentication Filters
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The following filters are used to verify that the user of the current
|
|
| session is logged into this application. The "basic" filter easily
|
|
| integrates HTTP Basic authentication for quick, simple checking.
|
|
|
|
|
*/
|
|
|
|
Route::filter(
|
|
'auth', function () {
|
|
if (Auth::guest()) {
|
|
if (Request::ajax()) {
|
|
return Response::make('Unauthorized', 401);
|
|
} else {
|
|
return Redirect::guest('login');
|
|
}
|
|
}
|
|
}
|
|
);
|
|
|
|
|
|
Route::filter(
|
|
'auth.basic', function () {
|
|
return Auth::basic();
|
|
}
|
|
);
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Guest Filter
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The "guest" filter is the counterpart of the authentication filters as
|
|
| it simply checks that the current user is not logged in. A redirect
|
|
| response will be issued if they are, which you may freely change.
|
|
|
|
|
*/
|
|
|
|
Route::filter(
|
|
'guest', function () {
|
|
if (Auth::check()) {
|
|
return Redirect::to('/');
|
|
}
|
|
return null;
|
|
}
|
|
);
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| CSRF Protection Filter
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The CSRF filter is responsible for protecting your application against
|
|
| cross-site request forgery attacks. If this special token in a user
|
|
| session does not match the one given in this request, we'll bail.
|
|
|
|
|
*/
|
|
|
|
Route::filter(
|
|
'csrf', function () {
|
|
if (Session::token() != Input::get('_token')) {
|
|
throw new Illuminate\Session\TokenMismatchException;
|
|
}
|
|
}
|
|
);
|
|
|
|
Route::filter(
|
|
'allow-register', function () {
|
|
if (Config::get('auth.allow_register') !== true) {
|
|
return View::make('error')->with('message', 'Not possible');
|
|
}
|
|
}
|
|
);
|