61 lines
1.8 KiB
PHP
61 lines
1.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Controller\Api\Internal;
|
|
|
|
use App\Container\LoggerAwareTrait;
|
|
use App\Controller\SingleActionInterface;
|
|
use App\Enums\StationPermissions;
|
|
use App\Exception\PermissionDeniedException;
|
|
use App\Http\Response;
|
|
use App\Http\ServerRequest;
|
|
use App\Radio\Frontend\Blocklist\BlocklistParser;
|
|
use App\Utilities\Types;
|
|
use Psr\Http\Message\ResponseInterface;
|
|
|
|
final class ListenerAuthAction implements SingleActionInterface
|
|
{
|
|
use LoggerAwareTrait;
|
|
|
|
public function __construct(
|
|
private readonly BlocklistParser $blocklistParser
|
|
) {
|
|
}
|
|
|
|
public function __invoke(
|
|
ServerRequest $request,
|
|
Response $response,
|
|
array $params
|
|
): ResponseInterface {
|
|
$station = $request->getStation();
|
|
|
|
$acl = $request->getAcl();
|
|
if (!$acl->isAllowed(StationPermissions::View, $station->getId())) {
|
|
$authKey = $request->getQueryParam('api_auth', '');
|
|
if (!$station->validateAdapterApiKey($authKey)) {
|
|
$this->logger->error(
|
|
'Invalid API key supplied for internal API call.',
|
|
[
|
|
'station_id' => $station->getId(),
|
|
'station_name' => $station->getName(),
|
|
]
|
|
);
|
|
|
|
throw new PermissionDeniedException();
|
|
}
|
|
}
|
|
|
|
$station = $request->getStation();
|
|
$listenerIp = Types::string($request->getParam('ip'));
|
|
|
|
if ($this->blocklistParser->isAllowed($station, $listenerIp)) {
|
|
return $response->withHeader('icecast-auth-user', '1');
|
|
}
|
|
|
|
return $response
|
|
->withHeader('icecast-auth-user', '0')
|
|
->withHeader('icecast-auth-message', 'geo-blocked');
|
|
}
|
|
}
|