sonot
/
PteroTheme
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix a fallback route issue causing API calls to return unauth responses and not 404s 

The fallback handler isn't scoped to a specific group, so the way this was setup caused requests to non-existent API routes to actually try and return the base view for Vue. This caused a mess of issues because that view is behind the middleware that expect sessions to be set, thus leading to very confusing authentication errors rather than a 404 response.
This commit is contained in:
Dane Everitt 2019-03-23 17:41:43 -07:00
parent 743ae040be
commit d59c38eb4e
No known key found for this signature in database
GPG Key ID: EEA66103B3D71F53
2 changed files with 11 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
routes/base.php
View File

@ -1,17 +1,8 @@
<?php
Route::get('/', 'IndexController@index')->name('index');
Route::get('/', 'IndexController@index')->name('index')->fallback();
Route::get('/account', 'IndexController@index')->name('account');
/*
|--------------------------------------------------------------------------
| Account Controller Routes
|--------------------------------------------------------------------------
|
| Endpoint: /account
|
*/
/*
|--------------------------------------------------------------------------
| Account API Controller Routes
@ -23,9 +14,7 @@ Route::get('/account', 'IndexController@index')->name('account');
Route::group(['prefix' => 'account/api'], function () {
Route::get('/', 'ClientApiController@index')->name('account.api');
Route::get('/new', 'ClientApiController@create')->name('account.api.new');
Route::post('/new', 'ClientApiController@store');
Route::delete('/revoke/{identifier}', 'ClientApiController@delete')->name('account.api.revoke');
});
@ -43,5 +32,5 @@ Route::group(['prefix' => 'account/two_factor'], function () {
Route::post('/totp/disable', 'SecurityController@delete')->name('account.two_factor.disable');
});
// Catch any other combinations of routes and pass them off to the Vuejs component.
Route::fallback('IndexController@index');
Route::get('/{vue}', 'IndexController@index')
->where('vue', '^(?!(\/)?(api|admin|daemon)).+');