begin auth filter

composer.json

@@ -16,6 +16,7 @@
     }],
     "require": {
       "laravel/lumen-framework": "5.1.x-dev",
+      "firebase/php-jwt": "~2.0",
       "luticate/utils": "*"
     },
     "require-dev": {

src/Auth/Business/LuticatePermissionsBusiness.php

@@ -11,4 +11,9 @@ class LuticatePermissionsBusiness extends LuBusiness {
     {
         $this->dataAccess = new LuticatePermissionsDataAccess();
     }
+
+    public static function getUserPermission($user_id, $permission_name)
+    {
+        return LuticatePermissionsDataAccess::getUserPermission($user_id, $permission_name);
+    }
 }

src/Auth/Business/LuticateUsersBusiness.php

@@ -2,13 +2,61 @@
 
 namespace Luticate\Auth\Business;
 
+use Illuminate\Http\Request;
 use Luticate\Utils\LuBusiness;
 use Luticate\Auth\DataAccess\LuticateUsersDataAccess;
 use Luticate\Auth\DBO\LuticateUsersDbo;
+use Luticate\Utils\LuRoute;
 
 class LuticateUsersBusiness extends LuBusiness {
+    /**
+     * @var LuticateUsersDbo
+     */
+    private static $_currentUser;
+
+    const TOKEN_HEADER = "X-Authentication";
+
     public function __construct()
     {
         $this->dataAccess = new LuticateUsersDataAccess();
     }
+
+    public static function getCurrentUser()
+    {
+        return self::$_currentUser;
+    }
+
+    /**
+     * @param $permissions string[]
+     * @param $request Request
+     * @return bool
+     */
+    public static function authFilter($permissions, $request)
+    {
+        $token = $request->header(self::TOKEN_HEADER);
+        if ($token == null)
+        {
+            return false;
+        }
+        $data = JwtHelper::decode($token);
+        if ($data == null)
+        {
+            return false;
+        }
+        $user_id = $data[JwtHelper::USER_KEY];
+
+        foreach ($permissions as $permission) {
+            if (!LuticatePermissionsBusiness::getUserPermission($user_id, $permission)) {
+                return false;
+            }
+        }
+
+        $user = LuticateUsersBusiness::getById($user_id);
+        if ($user == null)
+        {
+            return false;
+        }
+        self::$_currentUser = $user;
+        return true;
+    }
 }

src/Auth/DataAccess/LuticatePermissionsDataAccess.php

@@ -2,6 +2,7 @@
 
 namespace Luticate\Auth\DataAccess;
 
+use Luticate\Auth\DataAccess\SP\SpLuGetUserPermission;
 use Luticate\Utils\LuDataAccess;
 use Luticate\Auth\DataAccess\Models\LuticatePermissions;
 use Luticate\Auth\DBO\LuticatePermissionsDbo;
@@ -12,4 +13,9 @@ class LuticatePermissionsDataAccess extends LuDataAccess {
         parent::__construct();
         $this->model = new LuticatePermissions();
     }
+
+    public static function getUserPermission($user_id, $permission_name)
+    {
+        return SpLuGetUserPermission::execute($user_id, $permission_name);
+    }
 }