Files

38 lines
914 B
PHP
Raw Permalink Normal View History

2026-03-15 17:08:23 +07:00
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;
class DeviceApiKeyMiddleware
{
/**
* Handle an incoming request.
*
* @param \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response) $next
*/
public function handle(Request $request, Closure $next): Response
{
$apiKey = $request->header('X-DEVICE-API-KEY');
if (! $apiKey) {
return response()->json([
'status' => false,
'message' => 'API key missing',
], 401);
}
// ENV based (demo)
if ($apiKey !== config('services.device.api_key')) {
return response()->json([
'status' => false,
'message' => 'Invalid API key',
], 403);
}
return $next($request);
}
}