View Options

	diff --git a/app/Http/Controllers/Gate/GitHubGateController.php b/app/Http/Controllers/Gate/GitHubGateController.php
	index 2d892ca..f8ee830 100644
	--- a/app/Http/Controllers/Gate/GitHubGateController.php
	+++ b/app/Http/Controllers/Gate/GitHubGateController.php
	@@ -1,116 +1,135 @@
	<?php

	namespace Nasqueron\Notifications\Http\Controllers\Gate;

	use Log;
	use Request;

	use Keruald\GitHub\XHubSignature;

	class GitHubGateController extends GateController {

	///
	/// Private members
	///

	+ /**
	+ * The request signature, allowing to determine if the payload is legit
	+ * @var string
	+ */
	private $signature;
	+
	+ /**
	+ * The GitHub event triggering this request
	+ * @var string
	+ */
	private $event;
	+
	+ /**
	+ * The request delivery GUID
	+ * @var string
	+ */
	private $delivery;
	+
	+ /**
	+ * The request content, as a structured data
	+ * @var stdClass
	+ */
	private $payload;

	///
	/// Constants
	///

	const SERVICE_NAME = 'GitHub';

	///
	/// Requests processing
	///

	/**
	* Handles POST requests
	*
	* @param Request $request the HTTP request
	*/
	public function onPost ($door) {
	$this->door = $door;
	$this->extractHeaders();
	$this->extractPayload();

	if (!$this->isLegitRequest()) {
	abort(403, 'Unauthorized action.');
	return;
	}

	$this->logRequest();
	$this->onPayload();
	}

	/**
	* Extracts headers from the request
	*/
	protected function extractHeaders () {
	$this->signature = $this->getSignature();
	$this->event = Request::header('X-Github-Event');
	$this->delivery = Request::header('X-Github-Delivery');
	}

	/**
	* Gets the signature from an X-Hub-Signature header
	*
	* @param string the signature part of the header
	*/
	private function getSignature () {
	$headerSignature = Request::header('X-Hub-Signature');
	return XHubSignature::parseSignature($headerSignature);
	}

	/**
	* Extracts payload from the request
	*/
	protected function extractPayload () {
	$request = Request::instance();
	$this->payload = $request->getContent();
	}

	/**
	* Determines if the request is legit.
	*
	* @return bool true if the request looks legit; otherwise, false.
	*/
	protected function isLegitRequest () {
	$secret = $this->getSecret();

	// If the secret is not defined, request legitimation is bypassed
	if (empty($secret)) {
	return true;
	}

	return XHubSignature::validatePayload(
	$secret,
	$this->payload,
	$this->signature
	);
	}

	/**
	* Logs the request
	*/
	protected function logRequest () {
	Log::info('[Gate] New payload.', [
	'service' => static::SERVICE_NAME,
	'door' => $this->door,
	'delivery' => $this->delivery,
	'event' => $this->event,
	]);
	}

	///
	/// Payload processing
	///

	protected function onPayload () {
	// Here the logic to process the event.
	}
	}

File Metadata

Mime Type: text/x-diff
Expires: Thu, Sep 18, 02:07 (1 d, 21 h)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 2989514
Default Alt Text: (3 KB)

No OneTemporary
Actions

View Options

File Metadata

Event Timeline

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions