Firewall excludes

Author: adrolli

config/firewall.php

@@ -30,14 +30,19 @@
     'backdoor' => env('MOOX_FIREWALL_BACKDOOR', true),
 
     // Backdoor bypass token
-    'backdoor_token' => env('MOOX_FIREWALL_BACKDOOR_TOKEN', 'let-me-in'),
+    'backdoor_token' => env('MOOX_FIREWALL_BACKDOOR_TOKEN', 'v4a'),
 
     // Firewall page message
     'message' => env('MOOX_FIREWALL_MESSAGE', 'Moox Firewall'),
 
+    // Firewall page description
+    'description' => env('MOOX_FIREWALL_DESCRIPTION', 'Please enter your access token to continue.'),
+
     // Firewall page color, currently hex, will be Tailwind color in the future
     'color' => env('MOOX_FIREWALL_COLOR', 'darkblue'),
 
-    // Firewall page description
-    'description' => env('MOOX_FIREWALL_DESCRIPTION', 'Please enter your access token to continue.'),
+    // Exclude routes from firewall
+    'exclude' => [
+        'api/expiries/*',
+    ],
 ];

src/Listeners/FirewallListener.php

@@ -22,6 +22,14 @@ public function handle(RouteMatched $event)
             'ip' => $request->ip(),
         ]);
 
+        $excludedRoutes = $config['exclude'] ?? [];
+
+        foreach ($excludedRoutes as $pattern) {
+            if ($request->is($pattern)) {
+                return;
+            }
+        }
+
         if (in_array($request->ip(), $config['whitelist'] ?? [])) {
             return;
         }