Merge pull request #4861 from Laravel-Backpack/hot-fix-session-middleware-1

[hot-fix] Fix error on new Backpack installs - Target class [Backpack\CRUD\app\Http\Middleware\AuthenticateSession] does not exist.

Author: tabacitu

src/app/Http/Middleware/AuthenticateSession.php

@@ -2,8 +2,113 @@
 
 namespace Backpack\CRUD\app\Http\Middleware;
 
-if (class_exists('Illuminate\Contracts\Session\Middleware\AuthenticatesSessions', false)) {
-    class AuthenticateSession extends AuthenticateSessionL9
+use Closure;
+use Illuminate\Auth\AuthenticationException;
+use Illuminate\Contracts\Auth\Factory as AuthFactory;
+use Illuminate\Session\Middleware\AuthenticateSession as LaravelAuthenticateSession;
+
+class AuthenticateSession extends LaravelAuthenticateSession
+{
+    /**
+     * The authentication factory implementation.
+     *
+     * @var \Illuminate\Contracts\Auth\Factory
+     */
+    protected $auth;
+
+    protected $user;
+
+    /**
+     * Create a new middleware instance.
+     *
+     * @param  \Illuminate\Contracts\Auth\Factory  $auth
+     * @return void
+     */
+    public function __construct(AuthFactory $auth)
+    {
+        $this->auth = $auth;
+        $this->user = backpack_user();
+    }
+
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure  $next
+     * @return mixed
+     */
+    public function handle($request, Closure $next)
+    {
+        if (! $request->hasSession() || ! $this->user) {
+            return $next($request);
+        }
+
+        if ($this->guard()->viaRemember()) {
+            $passwordHash = explode('|', $request->cookies->get($this->guard()->getRecallerName()))[2] ?? null;
+
+            if (! $passwordHash || $passwordHash != $this->user->getAuthPassword()) {
+                $this->logout($request);
+            }
+        }
+
+        if (! $request->session()->has('password_hash_'.backpack_guard_name())) {
+            $this->storePasswordHashInSession($request);
+        }
+
+        if ($request->session()->get('password_hash_'.backpack_guard_name()) !== $this->user->getAuthPassword()) {
+            $this->logout($request);
+        }
+
+        return tap($next($request), function () use ($request) {
+            if (! is_null($this->guard()->user())) {
+                $this->storePasswordHashInSession($request);
+            }
+        });
+    }
+
+    /**
+     * Store the user's current password hash in the session.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return void
+     */
+    protected function storePasswordHashInSession($request)
+    {
+        if (! $this->user) {
+            return;
+        }
+
+        $request->session()->put([
+            'password_hash_'.backpack_guard_name() => $this->user->getAuthPassword(),
+        ]);
+    }
+
+    /**
+     * Log the user out of the application.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return void
+     *
+     * @throws \Illuminate\Auth\AuthenticationException
+     */
+    protected function logout($request)
+    {
+        $this->guard()->logoutCurrentDevice();
+
+        $request->session()->flush();
+
+        \Alert::error('Your password was changed in another browser session. Please login again using the new password.')->flash();
+
+        throw new AuthenticationException('Unauthenticated.', [backpack_guard_name()], backpack_url('login'));
+    }
+
+    /**
+     * Get the guard instance that should be used by the middleware.
+     *
+     * @return \Illuminate\Contracts\Auth\Factory|\Illuminate\Contracts\Auth\Guard
+     */
+    protected function guard()
     {
+        return $this->auth;
     }
 }