|
|
@@ -6,7 +6,7 @@ use Firebase\JWT\JWT;
|
|
|
use Firebase\JWT\Key;
|
|
|
use Libs\Database;
|
|
|
use Libs\Logger;
|
|
|
-use Libs\ResponseLib;
|
|
|
+use Libs\Payload;
|
|
|
use Psr\Http\Message\ServerRequestInterface;
|
|
|
|
|
|
class JwtAuthMiddleware
|
|
|
@@ -24,12 +24,12 @@ class JwtAuthMiddleware
|
|
|
if ($this->jwtSecret === '') {
|
|
|
// Configuração ausente é erro de servidor, não de autenticação.
|
|
|
Logger::error('JWT_SECRET is not configured; rejecting authenticated request');
|
|
|
- return ResponseLib::sendFail("Internal server error", [], "E_GENERIC")->withStatus(500);
|
|
|
+ return Payload::fail('Internal server error', [], 'E_GENERIC', 500);
|
|
|
}
|
|
|
|
|
|
$authHeader = $request->getHeaderLine('Authorization');
|
|
|
if (empty($authHeader) || !preg_match('/Bearer\s+(.*)/', $authHeader, $matches)) {
|
|
|
- return ResponseLib::sendFail("Unauthorized", [], "E_VALIDATE")->withStatus(401);
|
|
|
+ return Payload::fail('Unauthorized', [], 'E_VALIDATE', 401);
|
|
|
}
|
|
|
|
|
|
$token = $matches[1];
|
|
|
@@ -40,7 +40,7 @@ class JwtAuthMiddleware
|
|
|
$userEmail = $decoded->email ?? $decoded->username ?? null;
|
|
|
|
|
|
if (empty($userId) || empty($userEmail)) {
|
|
|
- return ResponseLib::sendFail("Unauthorized", [], "E_VALIDATE")->withStatus(401);
|
|
|
+ return Payload::fail('Unauthorized', [], 'E_VALIDATE', 401);
|
|
|
}
|
|
|
|
|
|
$pdo = Database::pdo();
|
|
|
@@ -50,7 +50,7 @@ class JwtAuthMiddleware
|
|
|
$user = $stmt->fetch(\PDO::FETCH_ASSOC);
|
|
|
|
|
|
if (!$user) {
|
|
|
- return ResponseLib::sendFail("Unauthorized", [], "E_VALIDATE")->withStatus(401);
|
|
|
+ return Payload::fail('Unauthorized', [], 'E_VALIDATE', 401);
|
|
|
}
|
|
|
|
|
|
$request = $request
|
|
|
@@ -64,7 +64,7 @@ class JwtAuthMiddleware
|
|
|
} catch (\Exception $e) {
|
|
|
// Detalhe do erro vai só para o log; cliente recebe mensagem genérica.
|
|
|
Logger::warning('JWT authentication failed', ['error' => $e->getMessage()]);
|
|
|
- return ResponseLib::sendFail("Unauthorized", [], "E_VALIDATE")->withStatus(401);
|
|
|
+ return Payload::fail('Unauthorized', [], 'E_VALIDATE', 401);
|
|
|
}
|
|
|
}
|
|
|
}
|