82 lines
2.6 KiB
PHP
82 lines
2.6 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use App\Support\LegacyCrypto\CiSeedCrypto;
|
|
use Illuminate\Cache\RateLimiting\Limit;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\RateLimiter;
|
|
use Illuminate\Support\ServiceProvider;
|
|
use Laravel\Fortify\Fortify;
|
|
|
|
class AppServiceProvider extends ServiceProvider
|
|
{
|
|
public function register(): void
|
|
{
|
|
if (class_exists(Fortify::class)) {
|
|
Fortify::ignoreRoutes();
|
|
}
|
|
|
|
if (app()->environment('local','development')) {
|
|
\DB::listen(function ($q) {
|
|
if ($q->time >= 50) { // 50ms 이상만
|
|
\Log::info('[SQL SLOW]', [
|
|
'ms' => $q->time,
|
|
'sql' => $q->sql,
|
|
'bindings' => $q->bindings,
|
|
]);
|
|
}
|
|
});
|
|
}
|
|
|
|
$this->app->singleton(CiSeedCrypto::class, function () {
|
|
$key = config('legacy.seed_user_key_default', '');
|
|
$iv = config('legacy.iv', []);
|
|
|
|
// key는 string
|
|
if (!is_string($key) || $key === '') {
|
|
throw new \RuntimeException('legacy crypto key missing (seed_user_key_default)');
|
|
}
|
|
|
|
// iv는 array (16 bytes)
|
|
if (!is_array($iv)) {
|
|
throw new \RuntimeException('legacy iv must be array');
|
|
}
|
|
if (count($iv) !== 16) {
|
|
throw new \RuntimeException('legacy iv array must be 16 bytes');
|
|
}
|
|
foreach ($iv as $b) {
|
|
if (!is_int($b) || $b < 0 || $b > 255) {
|
|
throw new \RuntimeException('legacy iv array values must be ints 0~255');
|
|
}
|
|
}
|
|
|
|
return new CiSeedCrypto($key, $iv);
|
|
});
|
|
}
|
|
|
|
public function boot(): void
|
|
{
|
|
RateLimiter::for('admin-login', function (Request $request) {
|
|
$email = (string) $request->input('email', $request->input('userid', $request->input('admin_email', '')));
|
|
$emailKey = $email !== '' ? mb_strtolower(trim($email)) : 'guest';
|
|
|
|
return [
|
|
Limit::perMinute(10)->by('ip:'.$request->ip()),
|
|
Limit::perMinute(5)->by('admin-login:'.$emailKey),
|
|
];
|
|
});
|
|
|
|
RateLimiter::for('admin-otp', function (Request $request) {
|
|
return [
|
|
Limit::perMinute(10)->by('ip:'.$request->ip()),
|
|
Limit::perMinute(5)->by('admin-otp:'.$request->session()->getId()),
|
|
];
|
|
});
|
|
|
|
RateLimiter::for('admin-mail-smtp', function () {
|
|
return Limit::perMinute(30)->by('admin-mail-smtp');
|
|
});
|
|
}
|
|
}
|