Add authorization check to readFiles method in SapFileController

2025-09-26 10:35:22 +05:30
parent 18eb234df4
commit 0710c3a7a1
1 changed files with 13 additions and 1 deletions
--- a/app/Http/Controllers/SapFileController.php
+++ b/app/Http/Controllers/SapFileController.php
@@ -27,8 +27,20 @@ class SapFileController extends Controller

    }

-    public function readFiles()
+    public function readFiles(Request $request)
    {
+        $expectedUser = env('API_AUTH_USER');
+        $expectedPw   = env('API_AUTH_PW');
+        $header_auth  = $request->header('Authorization');
+        $expectedToken = $expectedUser . ':' . $expectedPw;
+
+        if ("Bearer " . $expectedToken != $header_auth)
+        {
+            return response()->json([
+                'status_code' => 'ERROR',
+                'status_description' => 'Invalid authorization token!'
+            ], 403);
+        }

        $path = "/LaserPRD";