mirror of
https://github.com/koel/koel
synced 2024-12-01 00:09:17 +00:00
38 lines
1 KiB
PHP
38 lines
1 KiB
PHP
<?php
|
|
|
|
namespace App\Values;
|
|
|
|
use Illuminate\Contracts\Support\Arrayable;
|
|
use Laravel\Sanctum\NewAccessToken;
|
|
|
|
/**
|
|
* A "composite token" consists of two tokens:
|
|
*
|
|
* - an API token, which has all abilities
|
|
* - an audio token, which has only the "audio" ability i.e. to play and download audio files. This token is used for
|
|
* the audio player on the frontend as part of the GET query string, and thus has limited privileges.
|
|
*
|
|
* This approach helps prevent the API token from being logged by servers and proxies.
|
|
*/
|
|
final class CompositeToken implements Arrayable
|
|
{
|
|
private function __construct(public string $apiToken, public string $audioToken)
|
|
{
|
|
}
|
|
|
|
public static function fromAccessTokens(NewAccessToken $api, NewAccessToken $audio): self
|
|
{
|
|
return new self($api->plainTextToken, $audio->plainTextToken);
|
|
}
|
|
|
|
/**
|
|
* @return array<string, string>
|
|
*/
|
|
public function toArray(): array
|
|
{
|
|
return [
|
|
'token' => $this->apiToken,
|
|
'audio-token' => $this->audioToken,
|
|
];
|
|
}
|
|
}
|