mirror of
https://github.com/koel/koel
synced 2024-12-22 18:43:21 +00:00
26 lines
785 B
PHP
26 lines
785 B
PHP
<?php
|
|
|
|
namespace App\DTO;
|
|
|
|
use Laravel\Sanctum\NewAccessToken;
|
|
|
|
/**
|
|
* A "composition token" consists of two tokens:
|
|
*
|
|
* - an API token, which has all abilities
|
|
* - an audio token, which has only the "audio" ability i.e. to play and download audio files. This token is used for
|
|
* the audio player on the frontend as part of the GET query string, and thus has limited privileges.
|
|
*
|
|
* This approach helps prevent the API token from being logged by servers and proxies.
|
|
*/
|
|
final class CompositionToken
|
|
{
|
|
private function __construct(public string $apiToken, public string $audioToken)
|
|
{
|
|
}
|
|
|
|
public static function fromAccessTokens(NewAccessToken $api, NewAccessToken $audio): self
|
|
{
|
|
return new self($api->plainTextToken, $audio->plainTextToken);
|
|
}
|
|
}
|