grocy/middleware/SessionAuthMiddleware.php

<?php


namespace Grocy\Middleware;

use Psr\Http\Message\ResponseFactoryInterface;
use Psr\Http\Message\ServerRequestInterface as Request;

use Grocy\Services\SessionService;

class SessionAuthMiddleware extends AuthMiddleware
{
	public function __construct(\DI\Container $container, ResponseFactoryInterface $responseFactory)
	{
		parent::__construct($container, $responseFactory);
		$this->SessionCookieName = $this->AppContainer->get('LoginControllerInstance')->GetSessionCookieName();
	}

	protected $SessionCookieName;

	function authenticate(Request $request)
	{
		if (!defined('GROCY_SHOW_AUTH_VIEWS'))
		{
			define('GROCY_SHOW_AUTH_VIEWS', true);
		}

		$sessionService = SessionService::getInstance();
		if (!isset($_COOKIE[$this->SessionCookieName]) || !$sessionService->IsValidSession($_COOKIE[$this->SessionCookieName]))
		{
			return null;
		}
		else
		{
			return $sessionService->GetUserBySessionKey($_COOKIE[$this->SessionCookieName]);
		}
	}
}