move into sonardesk

Api/Models/ApiToken.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace Modules\Api\Models;
+
+use App\Models\User;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Support\Str;
+
+final class ApiToken extends Model
+{
+    protected $fillable = ['user_id', 'name', 'token', 'abilities', 'last_used_at', 'expires_at'];
+
+    protected $hidden = ['token'];
+
+    protected function casts(): array
+    {
+        return ['abilities' => 'array', 'last_used_at' => 'datetime', 'expires_at' => 'datetime'];
+    }
+
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    public static function issue(User $u, string $name, array $abilities = ['*'], ?\DateTimeInterface $expires = null): array
+    {
+        $plain = config('api.token_prefix', 'cms_').Str::random(64);
+        $record = self::query()->create(['user_id' => $u->id, 'name' => $name, 'token' => hash('sha256', $plain), 'abilities' => $abilities, 'expires_at' => $expires]);
+
+        return [$record, $plain];
+    }
+
+    public function allows(string $ability): bool
+    {
+        $a = $this->abilities ?: [];
+
+        return in_array('*', $a, true) || in_array($ability, $a, true);
+    }
+}