Add signed:relative support to signed middleware. (#33137)

Author: BrandonSurowiec

src/Illuminate/Routing/Middleware/ValidateSignature.php

@@ -12,13 +12,14 @@ class ValidateSignature
      *
      * @param  \Illuminate\Http\Request  $request
      * @param  \Closure  $next
+     * @param  string|null  $relative
      * @return \Illuminate\Http\Response
      *
      * @throws \Illuminate\Routing\Exceptions\InvalidSignatureException
      */
-    public function handle($request, Closure $next)
+    public function handle($request, Closure $next, $relative = null)
     {
-        if ($request->hasValidSignature()) {
+        if ($request->hasValidSignature($relative !== 'relative')) {
             return $next($request);
         }
 

tests/Integration/Routing/UrlSigningTest.php

@@ -85,6 +85,19 @@ public function testSignedMiddlewareWithRoutableParameter()
         $this->assertIsString($url = URL::signedRoute('foo', $model));
         $this->assertSame('routable', $this->get($url)->original);
     }
+
+    public function testSignedMiddlewareWithRelativePath()
+    {
+        Route::get('/foo/relative', function (Request $request) {
+            return $request->hasValidSignature($absolute = false) ? 'valid' : 'invalid';
+        })->name('foo')->middleware('signed:relative');
+
+        $this->assertIsString($url = 'https://fake.test'.URL::signedRoute('foo', [], null, $absolute = false));
+        $this->assertSame('valid', $this->get($url)->original);
+
+        $response = $this->get('/foo/relative');
+        $response->assertStatus(403);
+    }
 }
 
 class RoutableInterfaceStub implements UrlRoutable