<?php

/*
|--------------------------------------------------------------------------
| Application & Route Filters
|--------------------------------------------------------------------------
|
| Below you will find the "before" and "after" events for the application
| which may be used to do any work before or after a request into your
| application. Here you may also register your custom route filters.
|
*/

App::before(function($request)
{
    
});


App::after(function($request, $response)
{
    
});

/*
|--------------------------------------------------------------------------
| Authentication Filters
|--------------------------------------------------------------------------
|
| The following filters are used to verify that the user of the current
| session is logged into this application. The "basic" filter easily
| integrates HTTP Basic authentication for quick, simple checking.
|
*/

Route::filter('xss.disable', function(){
    Config::set('xssinput::xssinput.xss_filter_all_inputs', false);        
});

Route::filter('backend.auth', function()
{   
    if (Auth::backend()->guest()){
        if(Request::format() == 'json'){
            return Response::json(
                array(
                    "error" => "not_logged",
                    "message" => translation("response.not_logged")
                ), 401
            );    
        }else{
            return Redirect::guest('/admin/login');
        }        
        
    } 
});

Route::filter('backend.auth.permission', function()
{   
    $args = func_get_args();
    $args = array_slice($args,2);
    
    if (!Auth::backend()->user()->hasPermission($args)){
        if(Request::format() == 'json'){ 
            return Response::json(
                array(
                    "error" => "forbidden",
                    "message" => translation("response.forbidden")
                ), 403
            );
        }else{
            return Response::view('admin/error', array('msg' => Lang::get('http_status.403')), 403);        
        }  
    } 
});


Route::filter('auth.basic', function()
{
	return Auth::basic();
});

/*
|--------------------------------------------------------------------------
| Guest Filter
|--------------------------------------------------------------------------
|
| The "guest" filter is the counterpart of the authentication filters as
| it simply checks that the current user is not logged in. A redirect
| response will be issued if they are, which you may freely change.
|
*/

Route::filter('guest', function()
{
	if (Auth::check()) return Redirect::to('/');
});

/*
|--------------------------------------------------------------------------
| CSRF Protection Filter
|--------------------------------------------------------------------------
|
| The CSRF filter is responsible for protecting your application against
| cross-site request forgery attacks. If this special token in a user
| session does not match the one given in this request, we'll bail.
|
*/

Route::filter('csrf', function()
{

    $token = Request::ajax() ? Request::header('X-CSRF-Token') : Input::get('_token');
    if (Session::token() !== $token)
	{
		throw new Illuminate\Session\TokenMismatchException;
	}

});