Fix IP access middleware

Author: DaneEveritt

app/Http/Middleware/Api/AuthenticateIPAccess.php

@@ -29,12 +29,12 @@ public function handle(Request $request, Closure $next)
         }
 
         $find = new IP($request->ip());
-        foreach ($model->allowed_ips as $ip) {
+        foreach (json_decode($model->allowed_ips) as $ip) {
             if (Range::parse($ip)->contains($find)) {
                 return $next($request);
             }
         }
 
-        throw new AccessDeniedHttpException('This IP address does not have permission to access the API using these credentials.');
+        throw new AccessDeniedHttpException('This IP address (' . $request->ip() . ') does not have permission to access the API using these credentials.');
     }
 }

tests/Unit/Http/Middleware/API/AuthenticateIPAccessTest.php

@@ -25,7 +25,7 @@ public function testWithNoIPRestrictions()
      */
     public function testWithValidIP()
     {
-        $model = factory(ApiKey::class)->make(['allowed_ips' => ['127.0.0.1']]);
+        $model = factory(ApiKey::class)->make(['allowed_ips' => '["127.0.0.1"]']);
         $this->setRequestAttribute('api_key', $model);
 
         $this->request->shouldReceive('ip')->withNoArgs()->once()->andReturn('127.0.0.1');
@@ -38,7 +38,7 @@ public function testWithValidIP()
      */
     public function testValidIPAganistCIDRRange()
     {
-        $model = factory(ApiKey::class)->make(['allowed_ips' => ['192.168.1.1/28']]);
+        $model = factory(ApiKey::class)->make(['allowed_ips' => '["192.168.1.1/28"]']);
         $this->setRequestAttribute('api_key', $model);
 
         $this->request->shouldReceive('ip')->withNoArgs()->once()->andReturn('192.168.1.15');
@@ -54,10 +54,10 @@ public function testValidIPAganistCIDRRange()
      */
     public function testWithInvalidIP()
     {
-        $model = factory(ApiKey::class)->make(['allowed_ips' => ['127.0.0.1']]);
+        $model = factory(ApiKey::class)->make(['allowed_ips' => '["127.0.0.1"]']);
         $this->setRequestAttribute('api_key', $model);
 
-        $this->request->shouldReceive('ip')->withNoArgs()->once()->andReturn('127.0.0.2');
+        $this->request->shouldReceive('ip')->withNoArgs()->twice()->andReturn('127.0.0.2');
 
         $this->getMiddleware()->handle($this->request, $this->getClosureAssertions());
     }