f3f72afecd
Auth pages: - Create AuthSplitLayout with animated feature slides (6 slides, 3 languages) - All auth pages use split layout (form left, visual right) - Add show/hide password toggle with tooltip on Register - Legal footer only shown on Register via showLegal prop Subscribe page: - Redesign to match auth card pattern (centered, clean) - Platform icons, feature checklist, dynamic trial days (trialDays - 1) - Add "Switch workspace" link - Full i18n (en, es, pt-BR) Onboarding: - Rename URLs: step1 -> role, step2 -> connect - Add enforceStep() to prevent skipping/going back steps - Redirect /onboarding to /onboarding/role - Redesign Step2 with AuthSplitLayout and compact platform list - 21 tests covering all step enforcement scenarios Workspaces page: - Redesign with AuthSplitLayout (list with avatars, current badge) Language system: - Move locale from DB to cookie (forever, unencrypted, session.domain) - Create SetLocale middleware (sets cookie if missing, validates against config) - Rename lang/pt-br to lang/pt-BR - Add dayjs es locale Other: - Copy utils.ts from sendkit (formatNumber, formatMoney, copyToClipboard) - ConfirmDeleteModal with text confirmation (sendkit pattern) - i18n for ConfirmDeleteModal internal strings (common.php) - EmptyState component for posts index - Exact match for "All" posts in sidebar - Posts breadcrumbs show current status filter - DialogFooter buttons aligned left - API Keys page redesign with Table, DropdownMenu, EmptyState - Extract CreateApiKeyDialog and InviteMemberDialog to components - Remove API Keys from sidebar - DropdownMenuItem destructive variant for Remove action
67 lines
2.5 KiB
PHP
67 lines
2.5 KiB
PHP
<?php
|
|
|
|
use App\Http\Middleware\Api\AuthenticateApiToken;
|
|
use App\Http\Middleware\App\EnsureSubscribed;
|
|
use App\Http\Middleware\App\HandleAppearance;
|
|
use App\Http\Middleware\App\HandleInertiaRequests;
|
|
use App\Http\Middleware\App\SetLocale;
|
|
use App\Http\Middleware\Mcp\AuthenticateMcpToken;
|
|
use Illuminate\Foundation\Application;
|
|
use Illuminate\Foundation\Configuration\Exceptions;
|
|
use Illuminate\Foundation\Configuration\Middleware;
|
|
use Illuminate\Http\Middleware\AddLinkHeadersForPreloadedAssets;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Routing\Middleware\ThrottleRequests;
|
|
use Symfony\Component\HttpKernel\Exception\TooManyRequestsHttpException;
|
|
|
|
return Application::configure(basePath: dirname(__DIR__))
|
|
->withRouting(
|
|
web: __DIR__.'/../routes/web.php',
|
|
api: __DIR__.'/../routes/api.php',
|
|
apiPrefix: '',
|
|
commands: __DIR__.'/../routes/console.php',
|
|
channels: __DIR__.'/../routes/channels.php',
|
|
health: '/up',
|
|
)
|
|
->withMiddleware(function (Middleware $middleware): void {
|
|
$middleware->trustProxies(at: '*');
|
|
|
|
$middleware->encryptCookies(except: ['appearance', 'sidebar_state', 'locale']);
|
|
|
|
$middleware->web(append: [
|
|
SetLocale::class,
|
|
HandleAppearance::class,
|
|
HandleInertiaRequests::class,
|
|
AddLinkHeadersForPreloadedAssets::class,
|
|
]);
|
|
|
|
$middleware->alias([
|
|
'subscribed' => EnsureSubscribed::class,
|
|
'api.auth' => AuthenticateApiToken::class,
|
|
'mcp.auth' => AuthenticateMcpToken::class,
|
|
]);
|
|
|
|
$middleware->preventRequestForgery(except: [
|
|
'stripe/*',
|
|
]);
|
|
|
|
$middleware->prependToPriorityList(
|
|
ThrottleRequests::class,
|
|
AuthenticateApiToken::class,
|
|
);
|
|
})
|
|
->withExceptions(function (Exceptions $exceptions): void {
|
|
$exceptions->renderable(function (TooManyRequestsHttpException $e, Request $request) {
|
|
if ($request->expectsJson()) {
|
|
$retryAfter = $e->getHeaders()['Retry-After'] ?? null;
|
|
$message = $retryAfter
|
|
? "Rate limit exceeded. Please retry after {$retryAfter} seconds."
|
|
: 'Rate limit exceeded. Please try again later.';
|
|
|
|
return response()->json([
|
|
'name' => 'rate_limit_exceeded',
|
|
'message' => $message,
|
|
], 429)->withHeaders($e->getHeaders());
|
|
}
|
|
});
|
|
})->create();
|