fabce14aad
- Create TryPostServer MCP server with 17 tools: Post (List, Get, Create, Delete), Hashtag (List, Create, Update, Delete), Label (List, Create, Update, Delete), Workspace (Get), ApiKey (List, Create, Delete) - Create AuthenticateMcpToken middleware (logs in workspace owner) - Register mcp.auth middleware alias in bootstrap/app.php - Create routes/ai.php with mcp.trypost.test subdomain - Add PostApiTest with 6 tests (list, show, create, delete, isolation) - Fix PostApiTest assertions for pagination/resource wrapping - 704 tests passing, frontend build passing
53 lines
1.6 KiB
PHP
53 lines
1.6 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Middleware\Mcp;
|
|
|
|
use App\Models\ApiToken;
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class AuthenticateMcpToken
|
|
{
|
|
public function handle(Request $request, Closure $next): Response
|
|
{
|
|
$token = $request->bearerToken();
|
|
|
|
if (! $token) {
|
|
return response()->json(['message' => 'Missing API key.'], Response::HTTP_UNAUTHORIZED);
|
|
}
|
|
|
|
if (! str_starts_with($token, 'tp_') || strlen($token) !== 51) {
|
|
return response()->json(['message' => 'Invalid API key.'], Response::HTTP_UNAUTHORIZED);
|
|
}
|
|
|
|
$lookup = substr($token, 3, 16);
|
|
$apiToken = ApiToken::where('token_lookup', $lookup)->first();
|
|
|
|
if (! $apiToken || ! Hash::check($token, $apiToken->token_hash)) {
|
|
return response()->json(['message' => 'Invalid API key.'], Response::HTTP_UNAUTHORIZED);
|
|
}
|
|
|
|
if ($apiToken->status === 'expired') {
|
|
return response()->json(['message' => 'API key has expired.'], Response::HTTP_UNAUTHORIZED);
|
|
}
|
|
|
|
$apiToken->update(['last_used_at' => now()]);
|
|
|
|
$workspace = $apiToken->workspace;
|
|
$user = $workspace->owner;
|
|
|
|
if (! $user) {
|
|
return response()->json(['message' => 'No workspace owner found.'], Response::HTTP_UNAUTHORIZED);
|
|
}
|
|
|
|
$user->current_workspace_id = $workspace->id;
|
|
Auth::login($user);
|
|
|
|
return $next($request);
|
|
}
|
|
}
|