diff --git a/app/Http/Middleware/ValidateSignatureFlexible.php b/app/Http/Middleware/ValidateSignatureFlexible.php index cbcda39..c226c1e 100644 --- a/app/Http/Middleware/ValidateSignatureFlexible.php +++ b/app/Http/Middleware/ValidateSignatureFlexible.php @@ -1,36 +1,36 @@ -query('signature'); - - if (! $signature) { - abort(403); - } - - // Pakai APP_URL, bukan request scheme - $baseUrl = rtrim(config('app.url'), '/') . '/' . ltrim($request->path(), '/'); - - $query = collect($request->query()) - ->except('signature') - ->map(fn ($value, $key) => $key.'='.$value) - ->implode('&'); - - $original = rtrim($baseUrl.'?'.$query, '?'); - - $expected = hash_hmac('sha256', $original, config('app.key')); - - if (! hash_equals($expected, $signature)) { - abort(403, 'Invalid signature.'); - } - - return $next($request); - } -} \ No newline at end of file +query('signature'); + + if (! $signature) { + abort(403); + } + + // Pakai APP_URL, bukan request scheme + $baseUrl = rtrim(config('app.url'), '/').'/'.ltrim($request->path(), '/'); + + $query = collect($request->query()) + ->except('signature') + ->map(fn ($value, $key) => $key.'='.$value) + ->implode('&'); + + $original = rtrim($baseUrl.'?'.$query, '?'); + + $expected = hash_hmac('sha256', $original, config('app.key')); + + if (! hash_equals($expected, $signature)) { + abort(403, 'Invalid signature.'); + } + + return $next($request); + } +}