Josep Piguillem
c2b5291a74
Laravel-based OAuth/IAM service with Passport, Vue 3 frontend, and Docker Compose setup for local and production deployment. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
42 lines
1.3 KiB
PHP
42 lines
1.3 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Routing\Controllers\HasMiddleware;
|
|
use Illuminate\Routing\Controllers\Middleware;
|
|
use Laravel\Passport\Client;
|
|
use Laravel\Passport\Http\Middleware\CheckToken;
|
|
use OpenApi\Attributes as OA;
|
|
|
|
class AppController extends Controller implements HasMiddleware
|
|
{
|
|
public static function middleware(): array
|
|
{
|
|
return [new Middleware(CheckToken::using('users:read'))];
|
|
}
|
|
|
|
#[OA\Get(
|
|
path: '/apps',
|
|
summary: 'Listar todas las apps (clientes OAuth) registradas en el sistema',
|
|
description: 'Requiere el permiso users.view (o un token client_credentials, que actúa como servicio de confianza). Se usa para armar el selector de "roles por app".',
|
|
security: [['oauth2' => ['users:read']]],
|
|
tags: ['Users'],
|
|
responses: [
|
|
new OA\Response(response: 200, description: 'Listado de apps'),
|
|
new OA\Response(response: 403, description: 'Sin permiso users.view'),
|
|
]
|
|
)]
|
|
public function index(Request $request)
|
|
{
|
|
$actor = $request->user('api');
|
|
|
|
abort_if($actor && ! $actor->can('users.view'), 403);
|
|
|
|
return response()->json(
|
|
Client::query()->where('revoked', false)->orderBy('name')->get(['id', 'name'])
|
|
);
|
|
}
|
|
}
|