You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
28 lines
649 B
28 lines
649 B
2 months ago
|
<?php
|
||
|
|
|
||
|
|
use Kirby\Exception\AuthException;
|
||
|
|
|
||
|
|
return function () {
|
||
|
|
$auth = $this->kirby()->auth();
|
||
|
|
$allowImpersonation = $this->kirby()->option('api.allowImpersonation') ?? false;
|
||
|
|
|
||
|
|
// csrf token check
|
||
|
|
if (
|
||
|
|
$auth->type($allowImpersonation) === 'session' &&
|
||
|
|
$auth->csrf() === false
|
||
|
|
) {
|
||
|
|
throw new AuthException('Unauthenticated');
|
||
|
|
}
|
||
|
|
|
||
|
|
// get user from session or basic auth
|
||
|
|
if ($user = $auth->user(null, $allowImpersonation)) {
|
||
|
|
if ($user->role()->permissions()->for('access', 'panel') === false) {
|
||
|
|
throw new AuthException(['key' => 'access.panel']);
|
||
|
|
}
|
||
|
|
|
||
|
|
return $user;
|
||
|
|
}
|
||
|
|
|
||
|
|
throw new AuthException('Unauthenticated');
|
||
|
|
};
|