看板初始化提交

2026-06-01 21:23:12 -07:00
commit 54a842f4ab
2104 changed files with 241695 additions and 0 deletions
@@ -0,0 +1,60 @@
+<?php
+
+namespace Kanboard\Middleware;
+
+use Kanboard\Core\Controller\AccessForbiddenException;
+use Kanboard\Core\Controller\BaseMiddleware;
+use Kanboard\Core\Security\Role;
+
+/**
+ * Class AuthenticationMiddleware
+ *
+ * @package Kanboard\Middleware
+ * @author  Frederic Guillot
+ */
+class AuthenticationMiddleware extends BaseMiddleware
+{
+    /**
+     * Execute middleware
+     */
+    public function execute()
+    {
+        if (! $this->authenticationManager->checkCurrentSession()) {
+            $this->response->redirect($this->helper->url->to('AuthController', 'login'));
+            return;
+        }
+
+        if (! $this->isPublicAccess()) {
+            $this->handleAuthentication();
+        }
+
+        $this->next();
+    }
+
+    protected function handleAuthentication()
+    {
+        if (! $this->userSession->isLogged() && ! $this->authenticationManager->preAuthentication()) {
+            $this->nextMiddleware = null;
+
+            if ($this->request->isAjax()) {
+                $this->response->text('Not Authorized', 401);
+            } else {
+                $redirectURI = $this->request->getUri();
+                if ($this->request->isSafeRedirectUri($redirectURI)) {
+                    session_set('redirectAfterLogin', $redirectURI);
+                }
+                $this->response->redirect($this->helper->url->to('AuthController', 'login'));
+            }
+        }
+    }
+
+    protected function isPublicAccess()
+    {
+        if ($this->applicationAuthorization->isAllowed($this->router->getController(), $this->router->getAction(), Role::APP_PUBLIC)) {
+            $this->nextMiddleware = null;
+            return true;
+        }
+
+        return false;
+    }
+}