From: Louis Jeckel <louis.jeckel@outlook.com>
Date: Sat, 30 Jan 2021 02:04:21 +0000 (+0100)
Subject: send signed url instead of url with token
X-Git-Url: http://git.cubedesigners.com/?a=commitdiff_plain;h=91bc4f2e2a47e68117b43abfca302099dd47dbc0;p=psq.git

send signed url instead of url with token
---

diff --git a/app/Http/Controllers/FlowpaperController.php b/app/Http/Controllers/FlowpaperController.php
index 25d227e..bab1922 100644
--- a/app/Http/Controllers/FlowpaperController.php
+++ b/app/Http/Controllers/FlowpaperController.php
@@ -20,6 +20,7 @@ class FlowpaperController extends Controller
      * @param Request $request
      * @return RedirectResponse|View
      * @throws \Illuminate\Auth\Access\AuthorizationException
+     * Auth'd route
      */
     public function view(PdfFile $file, Request $request)
     {
@@ -47,6 +48,7 @@ class FlowpaperController extends Controller
      * @param PdfFile $file
      * @param Request $request
      * @return View|RedirectResponse
+     * Signed Route
      */
     public function discover(PdfFile $file, Request $request)
     {
diff --git a/app/PdfFile.php b/app/PdfFile.php
index 24dce2f..6938170 100644
--- a/app/PdfFile.php
+++ b/app/PdfFile.php
@@ -404,10 +404,9 @@ class PdfFile extends TwillModel implements Sortable
      */
     public function getSignedUrl(User $user): string
     {
-        $date = $user->discover_ends_at ?? now(); //in case mail is sent even if no trial, so no error
         return \URL::temporarySignedRoute(
             'flowpaper.discover',
-            $date->addDays(2),
+            now()->addDays(2),
             ['file' => $this->slug]
         );
     }
@@ -434,6 +433,7 @@ class PdfFile extends TwillModel implements Sortable
 //        if($user->receives_pdf) {
 //            return $this->getDownloadUrl();
 //        }
+        //Signed URL bypass Policy.
         return ($user->reg_complete || $user->type === User::TYPE_SUBSCRIBER) ?
             $this->getUrlWithToken($user) :
             $this->getSignedUrl($user);