Jonny Barnes
d5706b5f8f
Tokens now store a hashed row in micropub_tokens instead of being self-contained signed JWTs, so a leaked or unwanted token can actually be revoked. Since revocation already requires a DB lookup on every request, JWT's stateless-verification benefit was gone anyway, so this also drops the lcobucci/jwt dependency entirely. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014625MfkGZ7GVdbqKme4a8L
67 lines
1.9 KiB
PHP
67 lines
1.9 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Illuminate\Pagination\LengthAwarePaginator;
|
|
use Illuminate\Support\Collection;
|
|
use Illuminate\Support\Facades\URL;
|
|
use Illuminate\Support\ServiceProvider;
|
|
use Symfony\Component\HtmlSanitizer\HtmlSanitizer;
|
|
use Symfony\Component\HtmlSanitizer\HtmlSanitizerConfig;
|
|
|
|
class AppServiceProvider extends ServiceProvider
|
|
{
|
|
/**
|
|
* Register any application services.
|
|
*/
|
|
public function register(): void
|
|
{
|
|
//
|
|
}
|
|
|
|
/**
|
|
* Bootstrap any application services.
|
|
*/
|
|
public function boot(): void
|
|
{
|
|
/**
|
|
* Paginate a standard Laravel Collection.
|
|
*
|
|
* @param int $perPage
|
|
* @param int $total
|
|
* @param int $page
|
|
* @param string $pageName
|
|
* @return array
|
|
*/
|
|
Collection::macro('paginate', function ($perPage, $total = null, $page = null, $pageName = 'page') {
|
|
$page = $page ?: LengthAwarePaginator::resolveCurrentPage($pageName);
|
|
|
|
return new LengthAwarePaginator(
|
|
$this->forPage($page, $perPage),
|
|
$total ?: $this->count(),
|
|
$perPage,
|
|
$page,
|
|
[
|
|
'path' => LengthAwarePaginator::resolveCurrentPath(),
|
|
'pageName' => $pageName,
|
|
]
|
|
);
|
|
});
|
|
|
|
// Configure HtmlSanitizer
|
|
$this->app->bind(HtmlSanitizer::class, function () {
|
|
return new HtmlSanitizer(
|
|
(new HtmlSanitizerConfig)
|
|
->allowSafeElements()
|
|
->forceAttribute('a', 'rel', 'noopener nofollow')
|
|
);
|
|
});
|
|
|
|
// Turn on Eloquent strict mode when developing
|
|
Model::shouldBeStrict(! $this->app->isProduction());
|
|
|
|
// Force HTTPS URL generation in production
|
|
URL::forceHttps($this->app->isProduction());
|
|
}
|
|
}
|