From 3e7c6e5d82a10ac7d183dab60be38354bb28ed00 Mon Sep 17 00:00:00 2001
From: Aimeos <aimeos@aimeos.org>
Date: Thu, 20 Oct 2022 11:23:47 +0200
Subject: [PATCH] Added optional authentication

---
 app/Http/Kernel.php             |  5 ++++-
 app/Http/Middleware/AuthApi.php | 23 +++++++++++++++++++++++
 config/shop.php                 |  4 ++--
 3 files changed, 29 insertions(+), 3 deletions(-)
 create mode 100644 app/Http/Middleware/AuthApi.php

diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
index c3be254..2faa11b 100644
--- a/app/Http/Kernel.php
+++ b/app/Http/Kernel.php
@@ -39,7 +39,9 @@ class Kernel extends HttpKernel
         ],
 
         'api' => [
-            // \Laravel\Sanctum\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
+            \App\Http\Middleware\EncryptCookies::class,
+            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
+            \Illuminate\Session\Middleware\StartSession::class,
             'throttle:api',
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
         ],
@@ -54,6 +56,7 @@ class Kernel extends HttpKernel
      */
     protected $routeMiddleware = [
         'auth' => \App\Http\Middleware\Authenticate::class,
+        'auth.api' => \App\Http\Middleware\AuthApi::class,
         'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
         'auth.session' => \Illuminate\Session\Middleware\AuthenticateSession::class,
         'cache.headers' => \Illuminate\Http\Middleware\SetCacheHeaders::class,
diff --git a/app/Http/Middleware/AuthApi.php b/app/Http/Middleware/AuthApi.php
new file mode 100644
index 0000000..bb835ad
--- /dev/null
+++ b/app/Http/Middleware/AuthApi.php
@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class AuthApi
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        Auth::shouldUse('api');
+        return $next($request);
+    }
+}
diff --git a/config/shop.php b/config/shop.php
index 25ca05d..27a4ec8 100644
--- a/config/shop.php
+++ b/config/shop.php
@@ -13,11 +13,11 @@
 		// 'admin' => ['prefix' => 'admin', 'middleware' => ['web']],
 		// 'jqadm' => ['prefix' => 'admin/{site}/jqadm', 'middleware' => ['web', 'auth']],
 		// 'jsonadm' => ['prefix' => 'admin/{site}/jsonadm', 'middleware' => ['web', 'auth']],
-		'jsonapi' => ['prefix' => 'jsonapi', 'middleware' => ['api']],
+		'jsonapi' => ['prefix' => 'jsonapi', 'middleware' => ['api', 'auth.api']],
 		'account' => false,
 		'default' => false,
 		'supplier' => false,
-		'legal' => false,
+		'page' => false,
 		'update' => [],
 	],