feat(vikon): rewrite VikonIntegration from scratch — OAuth + core update
- HttpTask: Laravel Http facade with SSL enabled, retry, timeout - ValidateTokenTask: token check via auth.db-nica.ru - RefreshTokenTask: token refresh via db-nica.ru - FilesystemTask: path traversal protection, blocked extensions (PHP/ASP/etc) - AuthenticateAction: OAuth2 code→token exchange - CheckAccessAction: token validation + filesystem writability check - CheckVersionAction: version comparison against remote API - UpdateCoreAction: ZIP download, Zip Slip protection, atomic sync with rollback - VikonController: thin controller, 7 endpoints with Session-based token storage - Routes: access-check, dashboard.auth, throttle:30,1 middleware - Vue 3 Composition API frontend with progress bar - Config: all secrets in .env via config/vikon.php - vikon_core kept as fallback (not deleted)
This commit is contained in:
@@ -0,0 +1,17 @@
|
||||
<?php
|
||||
|
||||
use App\Containers\VikonIntegration\UI\WEB\Controllers\VikonController;
|
||||
use Illuminate\Support\Facades\Route;
|
||||
|
||||
Route::prefix('/dashboard/vikon-updates')
|
||||
->name('dashboard.vikon-updates.')
|
||||
->middleware(['access-check', 'dashboard.auth', 'throttle:30,1'])
|
||||
->group(function () {
|
||||
Route::get('/', [VikonController::class, 'index'])->name('index');
|
||||
Route::post('/authenticate', [VikonController::class, 'authenticate'])->name('authenticate');
|
||||
Route::post('/refresh-token', [VikonController::class, 'refreshToken'])->name('refresh-token');
|
||||
Route::post('/check-access', [VikonController::class, 'checkAccess'])->name('check-access');
|
||||
Route::post('/check-version', [VikonController::class, 'checkVersion'])->name('check-version');
|
||||
Route::post('/update-module', [VikonController::class, 'updateModule'])->name('update-module');
|
||||
Route::post('/logout', [VikonController::class, 'logout'])->name('logout');
|
||||
});
|
||||
Reference in New Issue
Block a user