Developer
<?php
namespace Laravel\Passport\Http\Controllers;
use Exception;
use Illuminate\Http\Request;
use Laravel\Passport\Bridge\User;
use Laravel\Passport\Exceptions\InvalidAuthTokenException;
trait RetrievesAuthRequestFromSession
{
/**
* Make sure the auth token matches the one in the session.
*
* @param \Illuminate\Http\Request $request
* @return void
*
* @throws \Laravel\Passport\Exceptions\InvalidAuthTokenException
*/
protected function assertValidAuthToken(Request $request)
{
if ($request->has('auth_token') && $request->session()->get('authToken') !== $request->get('auth_token')) {
$request->session()->forget(['authToken', 'authRequest']);
throw InvalidAuthTokenException::different();
}
}
/**
* Get the authorization request from the session.
*
* @param \Illuminate\Http\Request $request
* @return \League\OAuth2\Server\RequestTypes\AuthorizationRequest
*
* @throws \Exception
*/
protected function getAuthRequestFromSession(Request $request)
{
return tap($request->session()->get('authRequest'), function ($authRequest) use ($request) {
if (! $authRequest) {
throw new Exception('Authorization request was not present in the session.');
}
$authRequest->setUser(new User($request->user()->getAuthIdentifier()));
});
}
}
Developer
To ensure a smooth integration process and optimal performance, follow these best practices: