Update Passport

Author: dansup

app/Http/Controllers/Auth/AuthorizationController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Laravel\Passport\Contracts\AuthorizationViewResponse;
+use Laravel\Passport\Http\Controllers\AuthorizationController as PassportAuthorizationController;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use Symfony\Component\HttpFoundation\Response;
+
+class AuthorizationController extends PassportAuthorizationController
+{
+    public function authorize(
+        ServerRequestInterface $psrRequest,
+        Request $request,
+        ResponseInterface $psrResponse,
+        AuthorizationViewResponse $viewResponse
+    ): Response|AuthorizationViewResponse {
+        if ($request->user() && $request->user()->status != 1) {
+            Auth::logout();
+
+            return redirect('/login');
+        }
+
+        return parent::authorize($psrRequest, $request, $psrResponse, $viewResponse);
+    }
+}

app/Providers/AppServiceProvider.php

@@ -102,6 +102,7 @@ public function boot(): void
             app(UserActivityService::class)->markActive($e->user);
         });
 
+        Passport::ignoreRoutes();
         Passport::authorizationView('auth.oauth.authorize');
         Passport::tokensCan([
             'user:read' => 'Retrieve the user info',

routes/web.php

@@ -1,9 +1,30 @@
 <?php
 
+use App\Http\Controllers\Auth\AuthorizationController;
 use App\Http\Controllers\ObjectController;
 use App\Http\Controllers\ProfileLinkRedirectController;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Route;
+use Laravel\Passport\Http\Controllers;
+
+Route::get('/oauth/authorize', [AuthorizationController::class, 'authorize'])
+    ->middleware('web')
+    ->name('passport.authorizations.authorize');
+
+Route::post('/oauth/token', [Controllers\AccessTokenController::class, 'issueToken'])
+    ->middleware('throttle')
+    ->name('passport.token');
+
+Route::middleware(['web', 'auth:web'])->group(function () {
+    Route::post('/oauth/authorize', [Controllers\ApproveAuthorizationController::class, 'approve'])
+        ->name('passport.authorizations.approve');
+
+    Route::delete('/oauth/authorize', [Controllers\DenyAuthorizationController::class, 'deny'])
+        ->name('passport.authorizations.deny');
+
+    Route::post('/oauth/token/refresh', [Controllers\TransientTokenController::class, 'refresh'])
+        ->name('passport.token.refresh');
+});
 
 Route::get('/r/pl/{pid}/{lid}', [ProfileLinkRedirectController::class, 'redirect']);