Pterodactyl-Panel/routes/base.php

<?php

use Pterodactyl\Http\Middleware\RequireTwoFactorAuthentication;

Route::get('/', 'IndexController@index')->name('index')->fallback();
Route::get('/account', 'IndexController@index')
    ->withoutMiddleware(RequireTwoFactorAuthentication::class)
    ->name('account');

Route::get('/locales/{locale}/{namespace}.json', 'LocaleController')
    ->withoutMiddleware(RequireTwoFactorAuthentication::class)
    ->where('namespace', '.*');

Route::get('/{react}', 'IndexController@index')
    ->where('react', '^(?!(\/)?(api|auth|admin|daemon)).+');
Cleanup routing mechanisms 2017-04-02 03:01:10 +02:00			`<?php`
Finalize two-factor handling on account. 2018-06-21 08:05:35 +02:00
Block API access when 2FA is required on account; closes #2791 2020-12-06 22:56:14 +01:00			`use Pterodactyl\Http\Middleware\RequireTwoFactorAuthentication;`

Fix a fallback route issue causing API calls to return unauth responses and not 404s The fallback handler isn't scoped to a specific group, so the way this was setup caused requests to non-existent API routes to actually try and return the base view for Vue. This caused a mess of issues because that view is behind the middleware that expect sessions to be set, thus leading to very confusing authentication errors rather than a 404 response. 2019-03-24 01:41:43 +01:00			`Route::get('/', 'IndexController@index')->name('index')->fallback();`
Block API access when 2FA is required on account; closes #2791 2020-12-06 22:56:14 +01:00			`Route::get('/account', 'IndexController@index')`
			`->withoutMiddleware(RequireTwoFactorAuthentication::class)`
			`->name('account');`
fix error display when server is installing, closes #424 2017-05-05 22:27:36 +02:00
Getting somewhere on subuser stuff, adds i18n packages 2019-11-16 21:46:19 +01:00			`Route::get('/locales/{locale}/{namespace}.json', 'LocaleController')`
Block API access when 2FA is required on account; closes #2791 2020-12-06 22:56:14 +01:00			`->withoutMiddleware(RequireTwoFactorAuthentication::class)`
Getting somewhere on subuser stuff, adds i18n packages 2019-11-16 21:46:19 +01:00			`->where('namespace', '.*');`

Migrate the existing login form to use React 2019-06-10 04:26:20 +02:00			`Route::get('/{react}', 'IndexController@index')`
			`->where('react', '^(?!(\/)?(api\|auth\|admin\|daemon)).+');`