M3 Integration fixes

Modules/M3/Http/Middleware/Authenticate.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Auth\Middleware\Authenticate as Middleware;
+use Illuminate\Http\Request;
+
+class Authenticate extends Middleware
+{
+    /**
+     * Get the path the user should be redirected to when they are not authenticated.
+     *
+     * @param Request $request
+     *
+     * @return string|null
+     */
+    protected function redirectTo($request)
+    {
+        if (! $request->expectsJson()) {
+            return route('m3.login');
+        }
+    }
+}

Modules/M3/Http/Middleware/BasicAuth.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class BasicAuth
+{
+    public function handle(Request $request, Closure $next): mixed
+    {
+        $login = trim((string) m3_user());
+        $password = (string) m3_legacy_password();
+
+        if ($login !== '' && $this->checkPassword($login, $password, '%%SYSTEM%%')) {
+            return $next($request);
+        }
+
+        return $this->unauthorized();
+    }
+
+    private function checkPassword(string $login, string $password, string $passwordFile): bool
+    {
+        if (! is_readable($passwordFile)) {
+            return false;
+        }
+
+        $handle = fopen($passwordFile, 'rb');
+        if ($handle === false) {
+            return false;
+        }
+
+        try {
+            while (($line = fgets($handle)) !== false) {
+                $parts = explode(':', trim($line), 2);
+                if (count($parts) !== 2 || ! hash_equals($parts[0], $login)) {
+                    continue;
+                }
+
+                $storedHash = trim($parts[1]);
+
+                return $storedHash !== '' && password_verify($password, $storedHash);
+            }
+        } finally {
+            fclose($handle);
+        }
+
+        return false;
+    }
+
+    private function unauthorized(): Response
+    {
+        return response('INVALID USERNAME OR PASSWORD. ACCESS DENIED', 401)
+            ->header('WWW-Authenticate', 'Basic realm="RESTRICTED ACCESS"');
+    }
+}

Modules/M3/Http/Middleware/EncryptCookies.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Cookie\Middleware\EncryptCookies as Middleware;
+
+class EncryptCookies extends Middleware
+{
+    /**
+     * The names of the cookies that should not be encrypted.
+     *
+     * @var array
+     */
+    protected $except = [
+        //
+    ];
+}

Modules/M3/Http/Middleware/PreventRequestsDuringMaintenance.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\PreventRequestsDuringMaintenance as Middleware;
+
+class PreventRequestsDuringMaintenance extends Middleware
+{
+    /**
+     * The URIs that should be reachable while maintenance mode is enabled.
+     *
+     * @var array
+     */
+    protected $except = [
+        //
+    ];
+}

Modules/M3/Http/Middleware/RedirectIfAuthenticated.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Modules\M3\Providers\RouteServiceProvider;
+
+class RedirectIfAuthenticated
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param Request     $request
+     * @param Closure     $next
+     * @param string|null ...$guards
+     *
+     * @return mixed
+     */
+    public function handle(Request $request, Closure $next, ...$guards)
+    {
+        $guards = empty($guards) ? [null] : $guards;
+
+        foreach ($guards as $guard) {
+            if (Auth::guard($guard)->check()) {
+                return redirect(RouteServiceProvider::HOME);
+            }
+        }
+
+        return $next($request);
+    }
+}

Modules/M3/Http/Middleware/TrimStrings.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\TrimStrings as Middleware;
+
+class TrimStrings extends Middleware
+{
+    /**
+     * The names of the attributes that should not be trimmed.
+     *
+     * @var array
+     */
+    protected $except = [
+        'current_password',
+        'password',
+        'password_confirmation',
+    ];
+}

Modules/M3/Http/Middleware/TrustHosts.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustHosts as Middleware;
+
+class TrustHosts extends Middleware
+{
+    /**
+     * Get the host patterns that should be trusted.
+     *
+     * @return array
+     */
+    public function hosts()
+    {
+        return [
+            $this->allSubdomainsOfApplicationUrl(),
+        ];
+    }
+}

Modules/M3/Http/Middleware/TrustProxies.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
+
+class TrustProxies extends Middleware
+{
+    /**
+     * The trusted proxies for this application.
+     *
+     * @var array|string|null
+     */
+    protected $proxies;
+
+    /**
+     * The headers that should be used to detect proxies.
+     *
+     * @var int
+     */
+    protected $headers = Request::HEADER_X_FORWARDED_FOR | Request::HEADER_X_FORWARDED_HOST | Request::HEADER_X_FORWARDED_PORT | Request::HEADER_X_FORWARDED_PROTO | Request::HEADER_X_FORWARDED_AWS_ELB;
+}

Modules/M3/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Modules\M3\Http\Middleware;
+
+use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;
+
+class VerifyCsrfToken extends Middleware
+{
+    /**
+     * The URIs that should be excluded from CSRF verification.
+     *
+     * @var array
+     */
+    protected $except = [
+        //
+    ];
+}