mahdahar
cb4181dbff
- Consolidate page controllers into unified PagesController - Remove deprecated V2 pages, layouts, and controllers (AuthPage, DashboardPage, V2Page) - Add Edge resource with migration and model (EdgeResModel) - Implement new main_layout.php for consistent page structure - Reorganize patient views into dedicated module with dialog form - Update routing configuration in Routes.php - Enhance AuthFilter for improved authentication handling - Clean up unused V2 assets (CSS, JS) and legacy images - Update README.md with latest project information This refactoring improves code organization, removes technical debt, and establishes a cleaner foundation for future development.
65 lines
2.1 KiB
PHP
65 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace App\Filters;
|
|
|
|
use CodeIgniter\HTTP\RequestInterface;
|
|
use CodeIgniter\HTTP\ResponseInterface;
|
|
use CodeIgniter\Filters\FilterInterface;
|
|
use Config\Services;
|
|
use Firebase\JWT\JWT;
|
|
use Firebase\JWT\Key;
|
|
|
|
class AuthFilter implements FilterInterface
|
|
{
|
|
public function before(RequestInterface $request, $arguments = null)
|
|
{
|
|
$key = getenv('JWT_SECRET');
|
|
$token = $request->getCookie('token'); // ambil dari cookie
|
|
|
|
// Check if this is an API request or a page request
|
|
$isApiRequest = strpos($request->getUri()->getPath(), '/api/') !== false
|
|
|| $request->isAJAX();
|
|
|
|
// Kalau tidak ada token
|
|
if (!$token) {
|
|
if ($isApiRequest) {
|
|
return Services::response()
|
|
->setStatusCode(401)
|
|
->setJSON([
|
|
'status' => 'failed',
|
|
'message' => 'Unauthorized: Token not found'
|
|
]);
|
|
}
|
|
// Redirect to login for page requests
|
|
return redirect()->to('/v2/login');
|
|
}
|
|
|
|
try {
|
|
// Decode JWT : jika error maka akan mentrigger catch
|
|
$decoded = JWT::decode($token, new Key($key, 'HS256'));
|
|
|
|
file_put_contents(WRITEPATH . 'logs/tokens.log', date('Y-m-d H:i:s') . ' - ' . $token . PHP_EOL, FILE_APPEND);
|
|
|
|
// Kalau mau, bisa inject user info ke request
|
|
// $request->userData = $decoded;
|
|
|
|
} catch (\Exception $e) {
|
|
if ($isApiRequest) {
|
|
return Services::response()
|
|
->setStatusCode(401)
|
|
->setJSON([
|
|
'status' => 'failed',
|
|
'message' => 'Unauthorized: ' . $e->getMessage()
|
|
]);
|
|
}
|
|
// Redirect to login for page requests
|
|
return redirect()->to('/v2/login');
|
|
}
|
|
}
|
|
|
|
public function after(RequestInterface $request, ResponseInterface $response, $arguments = null)
|
|
{
|
|
// Tidak perlu apa-apa
|
|
}
|
|
}
|