makes possible right validation for temporary signed routes

2021-07-29 13:19:58 +03:00 · 2021-07-29 13:19:58 +03:00 · 22617a9025
commit 22617a9025
parent ad2eb04dc9
1 changed files with 5 additions and 3 deletions
--- a/app/Http/Middleware/ValidateSignature.php
+++ b/app/Http/Middleware/ValidateSignature.php
@ -54,6 +54,8 @@ class ValidateSignature

        $original = rtrim($url . '?' . Arr::query(
            Arr::only($request->query(), ['company_id'])
+        ) . Arr::query(
+            Arr::only($request->query(), ['expires'])
        ), '?');

        $signature = hash_hmac('sha256', $original, call_user_func(function () {