wip

Author: enricodelazzari

composer.json

@@ -16,9 +16,10 @@
         }
     ],
     "require": {
-        "php": "^8.4",
-        "spatie/laravel-package-tools": "^1.16",
-        "illuminate/contracts": "^10.0||^11.0||^12.0"
+        "php": "^8.2",
+        "aws/aws-sdk-php": "^3.343",
+        "illuminate/contracts": "^10.0||^11.0||^12.0",
+        "spatie/laravel-package-tools": "^1.16"
     },
     "require-dev": {
         "laravel/pint": "^1.14",
@@ -71,4 +72,4 @@
     },
     "minimum-stability": "dev",
     "prefer-stable": true
-}
+}

config/cloudfront-cookies.php

@@ -1,6 +1,22 @@
 <?php
 
-// config for Maize/CloudfrontCookies
 return [
+    'version' => null,
 
+    'region' => null,
+
+    'public_key_path' => null,
+
+    'private_key_path' => null,
+
+    // 'domain' => null,
+
+    // 'resource' => null,
+
+    // 'cookies_expiration' => [
+    //     'unit' => \Carbon\CarbonInterval::PERIOD_DAYS,
+    //     'value' => 2,
+    // ],
+
+    // 'cookies_domain' => null,
 ];

src/CloudfrontCookiesServiceProvider.php

@@ -2,24 +2,26 @@
 
 namespace Maize\CloudfrontCookies;
 
-use Maize\CloudfrontCookies\Commands\CloudfrontCookiesCommand;
+use Aws\CloudFront\CloudFrontClient;
 use Spatie\LaravelPackageTools\Package;
 use Spatie\LaravelPackageTools\PackageServiceProvider;
 
 class CloudfrontCookiesServiceProvider extends PackageServiceProvider
 {
     public function configurePackage(Package $package): void
     {
-        /*
-         * This class is a Package Service Provider
-         *
-         * More info: https://github.com/spatie/laravel-package-tools
-         */
         $package
             ->name('laravel-cloudfront-cookies')
-            ->hasConfigFile()
-            ->hasViews()
-            ->hasMigration('create_laravel_cloudfront_cookies_table')
-            ->hasCommand(CloudfrontCookiesCommand::class);
+            ->hasConfigFile();
+    }
+
+    public function packageBooted(): void
+    {
+        $this->app->singleton(CloudFrontClient::class, function () {
+            return new CloudFrontClient([
+                'version' => config('cloudfront.version'),
+                'region' => config('cloudfront.region'),
+            ]);
+        });
     }
 }

src/Http/Middleware/SignCloudfrontCookies.php

@@ -0,0 +1,58 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Aws\CloudFront\CloudFrontClient;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Cookie;
+
+class CloudFrontCookie
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        if (\App::environment('production')) {
+
+            $cookies = $this->signACookiePolicy();
+
+            $host = parse_url(config('app.url'))['host'];
+
+            foreach ($cookies as $key => $value) {
+                Cookie::queue($key, $value, 60 * 24 * 30, '/', ".{$host}", true);
+            }
+        }
+
+        return $next($request);
+    }
+
+    public function signACookiePolicy()
+    {
+        $resourceKey = config('services.cloudfront.resource_key');
+
+        $expires = time() + 3000;
+
+        $privateKey = storage_path('private_key.pem');
+
+        $keyPairId = config('services.cloudfront.key_id');
+
+        $cloudFrontClient = new CloudFrontClient([
+            'version' => '2014-11-06',
+            'region' => 'us-east-1',
+        ]);
+
+        $policy = '{"Statement":[{"Resource":"'.$resourceKey.'","Condition":{"DateLessThan":{"AWS:EpochTime":'.$expires.'}}}]}';
+
+        return $cloudFrontClient->getSignedCookie([
+            'private_key' => $privateKey,
+            'expires' => $expires,
+            'key_pair_id' => $keyPairId,
+            'policy' => $policy,
+        ]);
+    }
+}