HousemannandClaude Sonnet 4.6
60259a3655
Implements Single Sign-On with Authentik alongside the existing password login. Admins configure Client ID, Client Secret and Base URL directly in the app; the SSO button on the login page only appears when the configuration is complete and enabled. - SsoSetting model + migration (one-row config table) - sso_provider_id / is_sso_user fields on users (migration) - SsoController: redirect to Authentik + callback (token exchange, userinfo fetch, auto-create unknown users) - Admin\SsoSettingController + admin/sso/show view with setup guide and one-click Redirect URI copy - Admin dropdown: SSO-Konfiguration entry - Login page: Authentik button rendered conditionally No additional Composer packages required. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
87 lines
1.8 KiB
PHP
Executable File
87 lines
1.8 KiB
PHP
Executable File
<?php
|
|
|
|
namespace App\Models;
|
|
|
|
// use Illuminate\Contracts\Auth\MustVerifyEmail;
|
|
use Illuminate\Database\Eloquent\Factories\HasFactory;
|
|
use Illuminate\Foundation\Auth\User as Authenticatable;
|
|
use Illuminate\Notifications\Notifiable;
|
|
|
|
class User extends Authenticatable
|
|
{
|
|
/** @use HasFactory<\Database\Factories\UserFactory> */
|
|
use HasFactory, Notifiable;
|
|
|
|
/**
|
|
* The attributes that are mass assignable.
|
|
*
|
|
* @var list<string>
|
|
*/
|
|
protected $fillable = [
|
|
'name',
|
|
'email',
|
|
'password',
|
|
'is_admin',
|
|
'sso_provider_id',
|
|
'is_sso_user',
|
|
];
|
|
|
|
/**
|
|
* The attributes that should be hidden for serialization.
|
|
*
|
|
* @var list<string>
|
|
*/
|
|
protected $hidden = [
|
|
'password',
|
|
'remember_token',
|
|
];
|
|
|
|
/**
|
|
* Get the attributes that should be cast.
|
|
*
|
|
* @return array<string, string>
|
|
*/
|
|
protected function casts(): array
|
|
{
|
|
return [
|
|
'email_verified_at' => 'datetime',
|
|
'password' => 'hashed',
|
|
'is_sso_user' => 'boolean',
|
|
];
|
|
}
|
|
|
|
/**
|
|
* Beziehung zu Nagellacken
|
|
*/
|
|
public function nailPolishes()
|
|
{
|
|
return $this->belongsToMany(NailPolish::class, 'user_nail_polishes', 'user_id', 'nail_polish_id');
|
|
}
|
|
|
|
/**
|
|
* Prüft, ob der User ein Admin ist
|
|
*/
|
|
public function isAdmin()
|
|
{
|
|
return $this->is_admin || in_array($this->email, ['admin@neonail.com', 'neueradmin@neonail.com']);
|
|
}
|
|
|
|
/**
|
|
* Macht den User zum Admin
|
|
*/
|
|
public function makeAdmin()
|
|
{
|
|
$this->is_admin = true;
|
|
$this->save();
|
|
}
|
|
|
|
/**
|
|
* Entfernt Admin-Rechte
|
|
*/
|
|
public function removeAdmin()
|
|
{
|
|
$this->is_admin = false;
|
|
$this->save();
|
|
}
|
|
}
|