Enhance JWT Authentication Middleware and Configuration

- Updated the `AuthenticateJWT.php` middleware to conditionally skip IP and User Agent validation based on a new configuration setting, improving flexibility for users with dynamic IPs.
- Added a new configuration option `jwt_skip_ip_ua_validation` in `app.php` to control the validation behavior, allowing it to be set via the environment file.
- Updated documentation in `environment-variables.mdx` to include the new configuration option, ensuring users are informed about its purpose and usage.

These changes enhance the JWT authentication process by providing an option to bypass IP and User Agent validation, improving usability for self-hosted users.
This commit is contained in:
Julien Nahum
2025-05-07 08:26:33 +02:00
parent f2f5213d46
commit 6b03808d36
3 changed files with 19 additions and 0 deletions

View File

@@ -16,6 +16,11 @@ class AuthenticateJWT
*/
public function handle(Request $request, Closure $next)
{
// If skipping IP and UA validation is enabled in config, skip the rest
if (config('app.jwt_skip_ip_ua_validation')) {
return $next($request);
}
// Parse JWT Payload
try {
$payload = \JWTAuth::parseToken()->getPayload();