vignesh/trypost
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: use environment variable for Horizon access control

Browse source 
- Add HORIZON_ALLOWED_EMAILS env variable support
- Comma-separated list of emails allowed to access Horizon in production

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Paulo Castellano 2026-01-26 12:06:00 -03:00
parent 9dc04c28dc
commit 8289e11128
2 changed files with 17 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
app/Providers/HorizonServiceProvider.php
View file

@ -14,10 +14,6 @@ class HorizonServiceProvider extends HorizonApplicationServiceProvider
public function boot(): void
{
parent::boot();
// Horizon::routeSmsNotificationsTo('15556667777');
// Horizon::routeMailNotificationsTo('example@example.com');
// Horizon::routeSlackNotificationsTo('slack-webhook-url', '#channel');
}
/**
@ -28,9 +24,11 @@ public function boot(): void
protected function gate(): void
{
Gate::define('viewHorizon', function ($user = null) {
return in_array(optional($user)->email, [
//
]);
$allowedEmails = array_filter(
array_map('trim', explode(',', config('horizon.allowed_emails', '')))
);
return in_array(optional($user)->email, $allowedEmails);
});
}
}

12
config/horizon.php
View file

@ -30,6 +30,18 @@
'domain' => env('HORIZON_DOMAIN'),
/*
|--------------------------------------------------------------------------
| Horizon Allowed Emails
|--------------------------------------------------------------------------
|
| This is a comma-separated list of email addresses that are allowed to
| access Horizon in non-local environments. Leave empty to deny all.
|
*/
'allowed_emails' => env('HORIZON_ALLOWED_EMAILS', ''),
/*
|--------------------------------------------------------------------------
| Horizon Path