Kevin Adametz
037ec4d34b
Bots klopfen /oauth/authorize ohne gültige OAuth-Parameter ab; Passport wirft dann korrekt einen 4xx-Fehler. Da der Handler bei jeder gemeldeten Exception mailt und die API ausschliesslich Personal Access Tokens nutzt (Authorize-Flow nie legitim genutzt), war jede dieser Mails Rauschen. OAuthServerException wandert in $dontReport – Endpoint-Verhalten bleibt unveraendert, nur der Mail-Versand fuer diese Client-Fehler entfaellt. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
94 lines
2.9 KiB
PHP
94 lines
2.9 KiB
PHP
<?php
|
||
|
||
namespace App\Exceptions;
|
||
|
||
use Illuminate\Foundation\Exceptions\Handler as ExceptionHandler;
|
||
use Illuminate\Support\Facades\Mail;
|
||
use Laravel\Passport\Exceptions\OAuthServerException;
|
||
use Symfony\Component\ErrorHandler\ErrorRenderer\HtmlErrorRenderer;
|
||
use Symfony\Component\ErrorHandler\Exception\FlattenException;
|
||
use Symfony\Component\HttpFoundation\Response;
|
||
use Throwable;
|
||
|
||
class Handler extends ExceptionHandler
|
||
{
|
||
/**
|
||
* A list of the exception types that are not reported.
|
||
*
|
||
* @var array
|
||
*/
|
||
protected $dontReport = [
|
||
// OAuth-Client-Fehler (z. B. Bots, die /oauth/authorize ohne gültige
|
||
// Parameter abklopfen). Werden sauber als 4xx an den Aufrufer gerendert
|
||
// und sind keine Applikationsfehler – lösen daher keine Exception-Mail aus.
|
||
OAuthServerException::class,
|
||
];
|
||
|
||
/**
|
||
* A list of the inputs that are never flashed for validation exceptions.
|
||
*
|
||
* @var array
|
||
*/
|
||
protected $dontFlash = [
|
||
'password',
|
||
'password_confirmation',
|
||
];
|
||
|
||
/**
|
||
* Report or log an exception.
|
||
*
|
||
* @return void
|
||
*
|
||
* @throws \Exception
|
||
*/
|
||
public function report(Throwable $exception)
|
||
{
|
||
if ($this->shouldReport($exception)) {
|
||
$this->sendEmail($exception);
|
||
}
|
||
parent::report($exception);
|
||
}
|
||
|
||
/**
|
||
* Render an exception into an HTTP response.
|
||
*
|
||
* @param \Illuminate\Http\Request $request
|
||
* @return Response
|
||
*
|
||
* @throws Throwable
|
||
*/
|
||
public function render($request, Throwable $exception)
|
||
{
|
||
return parent::render($request, $exception);
|
||
}
|
||
|
||
public function sendEmail(Throwable $exception)
|
||
{
|
||
try {
|
||
$e = FlattenException::create($exception);
|
||
$handler = new HtmlErrorRenderer(true); // boolean, true raises debug flag...
|
||
|
||
$css = $handler->getStylesheet();
|
||
$content = $handler->getBody($e);
|
||
// Mail::to(config('app.exception_mail'))->send(new MailContact($contact));
|
||
// Verwende normale Mail-Klasse statt Facade, um Probleme bei der Initialisierung zu vermeiden
|
||
$to = config('app.exception_mail');
|
||
$subject = 'gruene-seele Exception: '.\Request::fullUrl();
|
||
|
||
if ($to) {
|
||
\Mail::send('emails.exception', compact('css', 'content'), function ($message) use ($to, $subject) {
|
||
$message
|
||
->to($to)
|
||
->subject($subject);
|
||
});
|
||
}
|
||
} catch (Throwable $ex) {
|
||
// Einfache Fehlerprotokollierung ohne Facade
|
||
file_put_contents(
|
||
storage_path('logs/laravel-'.date('Y-m-d').'.log'),
|
||
'['.date('Y-m-d H:i:s').'] exception-handler-error: '.$ex->getMessage()."\n",
|
||
FILE_APPEND
|
||
);
|
||
}
|
||
}
|
||
}
|