add school year and security fix
API CI/CD / Validate (composer + pint) (push) Successful in 3m14s
API CI/CD / Test (PHPUnit) (push) Failing after 3m28s
API CI/CD / Build frontend assets (push) Successful in 1m2s
API CI/CD / Security audit (push) Failing after 56s
API CI/CD / Deploy to shared hosting (PHP) (push) Has been skipped

This commit is contained in:
root
2026-07-06 00:55:01 -04:00
parent 99782c2a3c
commit 39228168c8
40 changed files with 20370 additions and 70 deletions
+5
View File
@@ -3,6 +3,7 @@
use App\Http\Middleware\ApiDocsAuth;
use App\Http\Middleware\ApiJwtAuth;
use App\Http\Middleware\CleanupScheduler;
use App\Http\Middleware\EnsureAccountActive;
use App\Http\Middleware\EnsureBadgeScanLogsAccess;
use App\Http\Middleware\EnsureClassProgressTeacherPortalAccess;
use App\Http\Middleware\EnsureParentProgressAccess;
@@ -32,6 +33,7 @@ return Application::configure(basePath: dirname(__DIR__))
)
->withMiddleware(function (Middleware $middleware): void {
$middleware->append(SecurityHeaders::class);
$middleware->alias([
// JWT auth
@@ -43,6 +45,9 @@ return Application::configure(basePath: dirname(__DIR__))
'auth.multi' => MultiAuth::class,
'multi.auth' => MultiAuth::class,
// Account status
'account.active' => EnsureAccountActive::class,
// Permission / role gates
'perm' => RequirePermission::class,
'require.permission' => RequirePermission::class,