81a3bb0f07
Add model-level hidden fields for secrets, tokens, keys, notification credentials, deployment logs, and environment values. Allow explicit read:sensitive API access to reveal gated private keys and deployment logs, and cover the behavior with feature and unit tests.
40 lines
1.2 KiB
PHP
40 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Models;
|
|
|
|
use Illuminate\Database\Eloquent\Casts\Attribute;
|
|
use Illuminate\Database\Eloquent\Factories\HasFactory;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Illuminate\Support\Facades\Crypt;
|
|
|
|
class OauthSetting extends Model
|
|
{
|
|
use HasFactory;
|
|
|
|
protected $fillable = ['provider', 'client_id', 'client_secret', 'redirect_uri', 'tenant', 'base_url', 'enabled'];
|
|
|
|
protected $hidden = [
|
|
'client_secret',
|
|
];
|
|
|
|
protected function clientSecret(): Attribute
|
|
{
|
|
return Attribute::make(
|
|
get: fn (?string $value) => empty($value) ? null : Crypt::decryptString($value),
|
|
set: fn (?string $value) => empty($value) ? null : Crypt::encryptString($value),
|
|
);
|
|
}
|
|
|
|
public function couldBeEnabled(): bool
|
|
{
|
|
switch ($this->provider) {
|
|
case 'azure':
|
|
return filled($this->client_id) && filled($this->client_secret) && filled($this->tenant);
|
|
case 'authentik':
|
|
case 'clerk':
|
|
return filled($this->client_id) && filled($this->client_secret) && filled($this->base_url);
|
|
default:
|
|
return filled($this->client_id) && filled($this->client_secret);
|
|
}
|
|
}
|
|
}
|