<?php

namespace IXP\Http;

/*

* Copyright (C) 2009 - 2020 Internet Neutral Exchange Association Company Limited By Guarantee.

* All Rights Reserved.

*

* This file is part of IXP Manager.

*

* IXP Manager is free software: you can redistribute it and/or modify it

* under the terms of the GNU General Public License as published by the Free

* Software Foundation, version v2.0 of the License.

*

* IXP Manager is distributed in the hope that it will be useful, but WITHOUT

* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

* FITNESS FOR A PARTICULAR PURPOSE. See the GpNU General Public License for

* more details.

*

* You should have received a copy of the GNU General Public License v2.0

* along with IXP Manager. If not, see:

*

* http://www.gnu.org/licenses/gpl-2.0.html

*/

use Illuminate\Auth\Middleware\{

AuthenticateWithBasicAuth,

Authorize,

EnsureEmailIsVerified

};

use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;

use Illuminate\Foundation\Http\Kernel as HttpKernel;

use Illuminate\Foundation\Http\Middleware\{

CheckForMaintenanceMode,

ConvertEmptyStringsToNull,

ValidatePostSize

};

use Illuminate\Http\Middleware\HandleCors;

use Illuminate\Http\Middleware\SetCacheHeaders;

use Illuminate\Routing\Middleware\{

SubstituteBindings,

ThrottleRequests

};

use Illuminate\Session\Middleware\StartSession;

use Illuminate\Session\Middleware\AuthenticateSession;

use Illuminate\View\Middleware\ShareErrorsFromSession;

use IXP\Http\Middleware\{

PreventRequestsDuringMaintenance,

Authenticate};

use Illuminate\Http\Middleware\TrustProxies;

class Kernel extends HttpKernel

{

/**

* The application's global HTTP middleware stack.

*

* These middleware are run during every request to your application.

*

* @var array

*/

protected $middleware = [

TrustProxies::class,

HandleCors::class,

PreventRequestsDuringMaintenance::class,

ValidatePostSize::class,

Middleware\TrimStrings::class,

ConvertEmptyStringsToNull::class,

];

/**

* The application's route middleware groups.

*

* @var array

*/

protected $middlewareGroups = [

'web' => [

Middleware\EncryptCookies::class,

AddQueuedCookiesToResponse::class,

StartSession::class,

ShareErrorsFromSession::class,

Middleware\VerifyCsrfToken::class,

SubstituteBindings::class,

Middleware\ControllerEnabled::class,

],

'apibase' => [

Middleware\EncryptCookies::class,

AddQueuedCookiesToResponse::class,

StartSession::class,

ShareErrorsFromSession::class,

SubstituteBindings::class,

Middleware\ControllerEnabled::class,

//'throttle:60,1',

//'bindings',

Middleware\ControllerEnabled::class,

],

'public/api/v4' => [

'apibase',

'apimaybeauth',

],

'api/v4' => [

'apibase',

'apiauth',

],

'e2frontend' => [

'web',

'eloquent2Frontend',

],

'grapher' => [

Middleware\EncryptCookies::class,

AddQueuedCookiesToResponse::class,

StartSession::class,

Middleware\ControllerEnabled::class,

'apimaybeauth',

Middleware\Services\Grapher::class,

],

'lookingglass' => [

'web',

Middleware\ControllerEnabled::class,

Middleware\Services\LookingGlass::class,

],

// Middleware group for simple APIs where we do not want to create cookies.

'publicapi' => [

SubstituteBindings::class,

Middleware\ControllerEnabled::class,

],

];

/**

* The application's route middleware.

*

* @var array

*/

protected $routeMiddleware = [

'2fa' => Middleware\Google2FA::class,

'apiauth' => Middleware\ApiAuthenticate::class,

'apideprecated' => Middleware\ApiDeprecated::class,

'apimaybeauth' => Middleware\ApiMaybeAuthenticate::class,

'assert.privilege' => Middleware\AssertUserPrivilege::class,

'auth' => Middleware\Authenticate::class,

'auth.basic' => AuthenticateWithBasicAuth::class,

'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,

//'bindings' => SubstituteBindings::class,

'cache.headers' => SetCacheHeaders::class,

'can' => Authorize::class,

'controller-enabled' => Middleware\ControllerEnabled::class,

'eloquent2Frontend' => Middleware\Eloquent2Frontend::class,

'grapher' => Middleware\Services\Grapher::class,

'guest' => Middleware\RedirectIfAuthenticated::class,

'rs-prefixes' => Middleware\RsPrefixes::class,

'signed' => Middleware\ValidateSignature::class,

'throttle' => ThrottleRequests::class,

'verified' => EnsureEmailIsVerified::class,

];

/**

* The priority-sorted list of middleware.

*

* This forces non-global middleware to always be in the given order.

*

* @var array

*/

protected $middlewarePriority = [

StartSession::class,

ShareErrorsFromSession::class,

Authenticate::class,

ThrottleRequests::class,

AuthenticateSession::class,

SubstituteBindings::class,

Authorize::class,

];

}