initial commit

app/Http/Controllers/Api/ConsoleValidateController.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Services\Hosting\Proxmox\VmManagementService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ConsoleValidateController extends Controller
+{
+    public function __invoke(Request $request, string $token, VmManagementService $management): JsonResponse
+    {
+        $secret = config('hosting.console.proxy_secret');
+        if (! $secret || $request->header('X-Console-Proxy-Secret') !== $secret) {
+            return response()->json(['error' => 'forbidden'], 403);
+        }
+
+        $data = \Illuminate\Support\Facades\Cache::get($management->consoleCacheKey($token));
+        if (! $data) {
+            return response()->json(['error' => 'expired'], 410);
+        }
+
+        return response()->json([
+            'proxmox_ws_url' => $data['ws_url'],
+            'vmid' => $data['vmid'],
+            'node' => $data['node'],
+        ]);
+    }
+}