PK ªZCc¾ ZZRunnableSolutionsEnabled.phpnuW+A„¶handle($request, $next, ...$scopes); } catch (\Laravel\Sanctum\Exceptions\MissingAbilityException $e) { throw new MissingScopeException($e->abilities()); } } } PKS'¬Zå“ÛKKCheckScopes.phpnuW+A„¶handle($request, $next, ...$scopes); } catch (\Laravel\Sanctum\Exceptions\MissingAbilityException $e) { throw new MissingScopeException($e->abilities()); } } } PKS'¬ZŒHF¢¨¨CheckAbilities.phpnuW+A„¶user() || ! $request->user()->currentAccessToken()) { throw new AuthenticationException; } foreach ($abilities as $ability) { if (! $request->user()->tokenCan($ability)) { throw new MissingAbilityException($ability); } } return $next($request); } } PKS'¬Z í?>w w %EnsureFrontendRequestsAreStateful.phpnuW+A„¶configureSecureCookieSessions(); return (new Pipeline(app()))->send($request)->through( static::fromFrontend($request) ? $this->frontendMiddleware() : [] )->then(function ($request) use ($next) { return $next($request); }); } /** * Configure secure cookie sessions. * * @return void */ protected function configureSecureCookieSessions() { config([ 'session.http_only' => true, 'session.same_site' => 'lax', ]); } /** * Get the middleware that should be applied to requests from the "frontend". * * @return array */ protected function frontendMiddleware() { $middleware = array_values(array_filter(array_unique([ config('sanctum.middleware.encrypt_cookies', \Illuminate\Cookie\Middleware\EncryptCookies::class), \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class, \Illuminate\Session\Middleware\StartSession::class, config('sanctum.middleware.validate_csrf_token'), config('sanctum.middleware.verify_csrf_token', \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class), ]))); array_unshift($middleware, function ($request, $next) { $request->attributes->set('sanctum', true); return $next($request); }); return $middleware; } /** * Determine if the given request is from the first-party application frontend. * * @param \Illuminate\Http\Request $request * @return bool */ public static function fromFrontend($request) { $domain = $request->headers->get('referer') ?: $request->headers->get('origin'); if (is_null($domain)) { return false; } $domain = Str::replaceFirst('https://', '', $domain); $domain = Str::replaceFirst('http://', '', $domain); $domain = Str::endsWith($domain, '/') ? $domain : "{$domain}/"; $stateful = array_filter(config('sanctum.stateful', [])); return Str::is(Collection::make($stateful)->map(function ($uri) { return trim($uri).'/*'; })->all(), $domain); } } PKS'¬ZøÄ0Ö¬¬CheckForAnyAbility.phpnuW+A„¶user() || ! $request->user()->currentAccessToken()) { throw new AuthenticationException; } foreach ($abilities as $ability) { if ($request->user()->tokenCan($ability)) { return $next($request); } } throw new MissingAbilityException($abilities); } } PK'n¬Zí~¯Û}}TrimStrings.phpnuW+A„¶ */ protected $except = [ 'current_password', 'password', 'password_confirmation', ]; } PK'n¬ZL{ ættTrustHosts.phpnuW+A„¶ */ public function hosts() { return [ $this->allSubdomainsOfApplicationUrl(), ]; } } PK'n¬Zgh¸—@@VerifyCsrfToken.phpnuW+A„¶ */ protected $except = [ // ]; } PK'n¬ZÃ{©{nn$PreventRequestsDuringMaintenance.phpnuW+A„¶ */ protected $except = [ // ]; } PK'n¬Z PƒÕÕAuthenticate.phpnuW+A„¶expectsJson()) { return route('login'); } } } PK'n¬Z"që33EncryptCookies.phpnuW+A„¶ */ protected $except = [ // ]; } PK'n¬Zj•¥‰‰TrustProxies.phpnuW+A„¶|string|null */ protected $proxies; /** * The headers that should be used to detect proxies. * * @var int */ protected $headers = Request::HEADER_X_FORWARDED_FOR | Request::HEADER_X_FORWARDED_HOST | Request::HEADER_X_FORWARDED_PORT | Request::HEADER_X_FORWARDED_PROTO | Request::HEADER_X_FORWARDED_AWS_ELB; } PK'n¬ZG½fŸÌÌValidateSignature.phpnuW+A„¶ */ protected $except = [ // 'fbclid', // 'utm_campaign', // 'utm_content', // 'utm_medium', // 'utm_source', // 'utm_term', ]; } PK'n¬ZÍ7ïmmRedirectIfAuthenticated.phpnuW+A„¶check()) { return redirect(RouteServiceProvider::HOME); } } return $next($request); } } PK ªZCc¾ ZZRunnableSolutionsEnabled.phpnuW+A„¶PKS'¬ZEoQPXX¦CheckForAnyScope.phpnuW+A„¶PKS'¬Zå“ÛKKBCheckScopes.phpnuW+A„¶PKS'¬ZŒHF¢¨¨ÌCheckAbilities.phpnuW+A„¶PKS'¬Z í?>w w %¶ EnsureFrontendRequestsAreStateful.phpnuW+A„¶PKS'¬ZøÄ0Ö¬¬‚CheckForAnyAbility.phpnuW+A„¶PK'n¬Zí~¯Û}}tTrimStrings.phpnuW+A„¶PK'n¬ZL{ ætt0TrustHosts.phpnuW+A„¶PK'n¬Zgh¸—@@âVerifyCsrfToken.phpnuW+A„¶PK'n¬ZÃ{©{nn$e PreventRequestsDuringMaintenance.phpnuW+A„¶PK'n¬Z PƒÕÕ'"Authenticate.phpnuW+A„¶PK'n¬Z"që33<$EncryptCookies.phpnuW+A„¶PK'n¬Zj•¥‰‰±%TrustProxies.phpnuW+A„¶PK'n¬ZG½fŸÌÌz(ValidateSignature.phpnuW+A„¶PK'n¬ZÍ7ïmm‹*RedirectIfAuthenticated.phpnuW+A„¶PKC.