implemented a lot of security measures

2025-12-09 20:29:32 +01:00
parent 4bdb93c171
commit 928d28fcaf
21 changed files with 953 additions and 134 deletions
--- a/routes/api.php
+++ b/routes/api.php
@@ -108,6 +108,10 @@ Route::prefix('v1')->name('api.v1.')->group(function () {
            ->middleware('signed')
            ->name('photo-shares.asset');
        Route::post('/events/{token}/upload', [EventPublicController::class, 'upload'])->name('events.upload');
+        Route::get('/branding/asset/{path}', [EventPublicController::class, 'brandingAsset'])
+            ->where('path', '.*')
+            ->middleware('signed')
+            ->name('branding.asset');

        Route::get('/gallery/{token}', [EventPublicController::class, 'gallery'])->name('gallery.show');
        Route::get('/gallery/{token}/photos', [EventPublicController::class, 'galleryPhotos'])->name('gallery.photos');