Backdoor with URL

Author: adrolli

config/firewall.php

@@ -30,14 +30,20 @@
     'backdoor' => env('MOOX_FIREWALL_BACKDOOR', true),
 
     // Backdoor bypass token
-    'backdoor_token' => env('MOOX_FIREWALL_BACKDOOR_TOKEN', 'v4a'),
+    'backdoor_token' => env('MOOX_FIREWALL_BACKDOOR_TOKEN', 'let-me-in'),
+
+    // Backdoor limited to URL
+    'backdoor_url' => env('MOOX_FIREWALL_BACKDOOR_URL', '/backdoor'),
 
     // Firewall page message
     'message' => env('MOOX_FIREWALL_MESSAGE', 'Moox Firewall'),
 
     // Firewall page description
     'description' => env('MOOX_FIREWALL_DESCRIPTION', 'Please enter your access token to continue.'),
 
+    // Firewall denied message
+    'denied_message' => env('MOOX_FIREWALL_DENIED_MESSAGE', 'Access denied. Please contact the IT department.'),
+
     // Firewall page color, currently hex, will be Tailwind color in the future
     'color' => env('MOOX_FIREWALL_COLOR', 'darkblue'),
 

src/Listeners/FirewallListener.php

@@ -38,15 +38,32 @@ public function handle(RouteMatched $event)
             return;
         }
 
-        $token = $config['backdoor_token'] ?? '';
+        if (! config('firewall.backdoor')) {
+            echo View::make('firewall::access-denied')->render();
+            exit;
+        }
+
+        $backdoorUrl = $config['backdoor_url'] ?? null;
+        $isBackdoorUrl = $backdoorUrl ? ($request->is($backdoorUrl) || $request->path() === ltrim($backdoorUrl, '/')) : false;
+
+        if ($backdoorUrl && ! $isBackdoorUrl) {
+            echo View::make('firewall::access-denied')->render();
+            exit;
+        }
+
+        $token = $config['backdoor_token'] ?? 'let-me-in';
         $requestToken = $request->get('backdoor_token') ?? $request->header('X-Backdoor-Token');
 
         if ($token && $requestToken === $token) {
             if ($request->hasSession()) {
                 $request->session()->put('firewall_authenticated', true);
             }
 
-            return redirect($request->url());
+            if ($isBackdoorUrl) {
+                return redirect('/');
+            } else {
+                return redirect($request->url());
+            }
         }
 
         $errorMessage = null;
@@ -58,7 +75,7 @@ public function handle(RouteMatched $event)
             }
         }
 
-        echo View::make('firewall::firewall', [
+        echo View::make('firewall::backdoor', [
             'firewall_error' => $errorMessage,
         ])->render();
         exit;