1. class
  2. Hypervel
  3. \
  4. Sanctum
  5. \
  6. Http
  7. \
  8. Middleware
  9. \
  10. AuthenticateSession

AuthenticateSession

class AuthenticateSession implements AuthenticatesSessions

Methods

__construct(Factory $auth, Repository $config)

Create a new middleware instance.

Response
handle(Request $request, Closure $next)

Handle an incoming request.

array
sanctumSessionGuards()

Get the session guards declared by the application's sanctum guards.

void
storePasswordHashInSession(Request $request, string $guard, SessionGuard $guardInstance)

Store the user's current password hash in the session.

bool
validatePasswordHash(SessionGuard $guard, string|null $passwordHash, mixed $storedValue)

Validate the password hash against the stored value.

bool
validateRecallerPasswordHash(Request $request, SessionGuard $guard)

Validate the remembered-login password hash against the guard's current user.

Details

at line 21
__construct(Factory $auth, Repository $config)

Create a new middleware instance.

Parameters

Factory $auth
Repository $config

at line 32
Response handle(Request $request, Closure $next)

Handle an incoming request.

Parameters

Request $request
Closure $next

Return Value

Response

Exceptions

AuthenticationException

at line 99
protected array sanctumSessionGuards()

Get the session guards declared by the application's sanctum guards.

The union across every sanctum-driver guard entry: password-hash invalidation applies to any session guard participating in stateful sanctum authentication anywhere in the application.

Return Value

array

at line 126
protected void storePasswordHashInSession(Request $request, string $guard, SessionGuard $guardInstance)

Store the user's current password hash in the session.

Parameters

Request $request
string $guard
SessionGuard $guardInstance

Return Value

void

at line 139
protected bool validatePasswordHash(SessionGuard $guard, string|null $passwordHash, mixed $storedValue)

Validate the password hash against the stored value.

Only HMAC artifacts are valid; Hypervel has no released raw-hash session artifacts to accept.

Parameters

SessionGuard $guard
string|null $passwordHash
mixed $storedValue

Return Value

bool

at line 148
protected bool validateRecallerPasswordHash(Request $request, SessionGuard $guard)

Validate the remembered-login password hash against the guard's current user.

Parameters

Request $request
SessionGuard $guard

Return Value

bool