Merge pull request #15 from aspirepress/random-api-token

Adding random generation of an API token for the repository

composer.json

@@ -22,6 +22,7 @@
         "laminas/laminas-servicemanager": "^3.4",
         "laminas/laminas-stdlib": "^3.6",
         "mezzio/mezzio": "^3.7",
+        "mezzio/mezzio-cors": "^1.12",
         "mezzio/mezzio-fastroute": "^3.0.3",
         "mezzio/mezzio-helpers": "^5.7",
         "monolog/monolog": "^3.2",

config/autoload/cors.global.php

@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+use Mezzio\Cors\Configuration\ConfigurationInterface;
+
+return [
+    ConfigurationInterface::CONFIGURATION_IDENTIFIER => [
+        'allowed_origins' => ['*'],
+    ],
+];

config/config.php

@@ -14,6 +14,7 @@
 ];
 
 $aggregator = new ConfigAggregator([
+    \Mezzio\Cors\ConfigProvider::class,
     \Mezzio\ConfigProvider::class,
     \Mezzio\Tooling\ConfigProvider::class,
     \Mezzio\Helper\ConfigProvider::class,

config/pipeline.php

@@ -4,6 +4,7 @@
 
 use Laminas\Stratigility\Middleware\ErrorHandler;
 use Mezzio\Application;
+use Mezzio\Cors\Middleware\CorsMiddleware;
 use Mezzio\Handler\NotFoundHandler;
 use Mezzio\Helper\BodyParams\BodyParamsMiddleware;
 use Mezzio\Helper\ServerUrlMiddleware;
@@ -44,6 +45,8 @@
     // - $app->pipe('/docs', $apiDocMiddleware);
     // - $app->pipe('/files', $filesMiddleware);
 
+    $app->pipe(CorsMiddleware::class);
+
     // Register the routing middleware in the middleware pipeline.
     // This middleware registers the Mezzio\Router\RouteResult request attribute.
     $app->pipe(RouteMiddleware::class);

config/routes.php

@@ -2,6 +2,7 @@
 
 declare(strict_types=1);
 
+use AspirePress\AspireCloud\Repository\Api\V1\ApiTokenIssuanceHandler;
 use AspirePress\AspireCloud\V1\CatchAll\Handlers\CatchAllHandler;
 use Mezzio\Application;
 use Mezzio\MiddlewareFactory;
@@ -26,5 +27,6 @@
  */
 
 return static function (Application $app, MiddlewareFactory $factory, ContainerInterface $container): void {
+    $app->post('/repository/api/v1/apitoken', ApiTokenIssuanceHandler::class, 'repository.api.v1.apitoken');
     $app->route('/{path:.*}', CatchAllHandler::class, ['GET', 'POST'], 'app.home');
 };

src/ConfigProvider.php

@@ -6,6 +6,7 @@
 
 use AspirePress\AspireCloud\Data\Factories\PluginRepositoryFactory;
 use AspirePress\AspireCloud\Data\Repositories\PluginRepository;
+use AspirePress\AspireCloud\Repository\Api\V1\ApiTokenIssuanceHandler;
 use Aura\Sql\ExtendedPdoInterface;
 use Laminas\ServiceManager\Factory\InvokableFactory;
 use Laminas\Stratigility\Middleware\ErrorHandler;
@@ -20,6 +21,9 @@ public function __invoke(): array
     {
         return [
             'dependencies' => [
+                'invokables' => [
+                    ApiTokenIssuanceHandler::class => ApiTokenIssuanceHandler::class,
+                ],
                 'delegators' => [
                     ErrorHandler::class => [LoggingListenerDelegatorFactory::class],
                 ],

src/Repository/Api/V1/ApiTokenIssuanceHandler.php

@@ -0,0 +1,18 @@
+<?php
+
+declare(strict_types=1);
+
+namespace AspirePress\AspireCloud\Repository\Api\V1;
+
+use Laminas\Diactoros\Response\JsonResponse;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use Psr\Http\Server\RequestHandlerInterface;
+
+class ApiTokenIssuanceHandler implements RequestHandlerInterface
+{
+    public function handle(ServerRequestInterface $request): ResponseInterface
+    {
+        return new JsonResponse(['api_key' => bin2hex(random_bytes(16))]);
+    }
+}