From 2386148b8f048ba40d9f26cc97898bdcdc778ea2 Mon Sep 17 00:00:00 2001
From: Daniel Weipert <git@mail.dweipert.de>
Date: Sat, 13 Dec 2025 16:27:53 +0100
Subject: matrix specification split

---
 src/Models/User.php | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

(limited to 'src/Models/User.php')

diff --git a/src/Models/User.php b/src/Models/User.php
index 423394a..c0c73f8 100644
--- a/src/Models/User.php
+++ b/src/Models/User.php
@@ -3,7 +3,9 @@
 namespace App\Models;
 
 use App\Database;
+use App\Errors\UnauthorizedError;
 use App\Support\ConnectsToDatabase;
+use Symfony\Component\HttpFoundation\Request;
 
 class User implements ConnectsToDatabase
 {
@@ -50,7 +52,7 @@ class User implements ConnectsToDatabase
     return self::fromDatabase($row);
   }
 
-  public static function fetchWithAccessToken(string $accessToken): ?static
+  public static function fetchWithAccessToken(string $accessToken): ?self
   {
     $row = Database::getInstance()->query(<<<SQL
       select users.* from users left join tokens on tokens.user_id = users.id where tokens.access_token=:access_token
@@ -70,6 +72,18 @@ class User implements ConnectsToDatabase
     return new self($id);
   }
 
+  public static function authenticateWithRequest(Request $request): self
+  {
+    $accessToken = str_replace("Bearer ", "", $request->headers->get("authorization") ?: "");
+    $user = self::fetchWithAccessToken($accessToken);
+
+    if (empty($user)) {
+      throw new UnauthorizedError();
+    }
+
+    return $user;
+  }
+
   public function insert(): bool
   {
     return !! Database::getInstance()->query(
-- 
cgit v1.2.3