743f54b317
Add encrypted team-scoped integration token storage, admin UI, authorization, and Cloudflare token validation.
42 lines
1.2 KiB
PHP
42 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Services;
|
|
|
|
use Illuminate\Http\Client\PendingRequest;
|
|
use Illuminate\Support\Facades\Http;
|
|
|
|
class CloudflareTokenValidator
|
|
{
|
|
public function validate(string $token, array $capabilities): bool
|
|
{
|
|
$client = $this->client($token);
|
|
$verification = $client->get('https://api.cloudflare.com/client/v4/user/tokens/verify');
|
|
|
|
if (! $verification->successful() || $verification->json('result.status') !== 'active') {
|
|
return false;
|
|
}
|
|
|
|
if (in_array('dns', $capabilities, true)) {
|
|
$zones = $client->get('https://api.cloudflare.com/client/v4/zones', ['per_page' => 1]);
|
|
$zoneId = $zones->json('result.0.id');
|
|
|
|
if (! $zones->successful() || ! is_string($zoneId)) {
|
|
return false;
|
|
}
|
|
|
|
return $client->get("https://api.cloudflare.com/client/v4/zones/{$zoneId}/dns_records", [
|
|
'per_page' => 1,
|
|
])->successful();
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
private function client(string $token): PendingRequest
|
|
{
|
|
return Http::withToken($token)
|
|
->acceptJson()
|
|
->connectTimeout(5)
|
|
->timeout(10);
|
|
}
|
|
}
|