] * @since [v3.0] * @return void */ public function boot(UrlGenerator $url) { if (env('APP_FORCE_TLS')) { if (strpos(env('APP_URL'), 'https') === 0) { $url->forceScheme('https'); } else { \Log::debug("'APP_FORCE_TLS' is set to true, but 'APP_URL' does not start with 'https://'. Will not force TLS on connections."); } } // TODO - isn't it somehow 'gauche' to check the environment directly; shouldn't we be using config() somehow? if ( ! env('APP_ALLOW_INSECURE_HOSTS')) { // unless you set APP_ALLOW_INSECURE_HOSTS, you should PROHIBIT forging domain parts of URL via Host: headers $url_parts = parse_url(config('app.url')); if ($url_parts && array_key_exists('scheme', $url_parts) && array_key_exists('host', $url_parts)) { // check for the *required* parts of a bare-minimum URL \URL::forceRootUrl(config('app.url')); } else { \Log::error("Your APP_URL in your .env is misconfigured - it is: ".config('app.url').". Many things will work strangely unless you fix it."); } } \Illuminate\Pagination\Paginator::useBootstrap(); Schema::defaultStringLength(191); Asset::observe(AssetObserver::class); Accessory::observe(AccessoryObserver::class); Component::observe(ComponentObserver::class); Consumable::observe(ConsumableObserver::class); License::observe(LicenseObserver::class); Setting::observe(SettingObserver::class); } /** * Register any application services. * * @return void */ public function register() { // Only load rollbar if there is a rollbar key and the app is in production if (($this->app->environment('production')) && (config('logging.channels.rollbar.access_token'))) { $this->app->register(\Rollbar\Laravel\RollbarServiceProvider::class); } // Only load dusk's service provider if the app is in local or develop mode if ($this->app->environment(['local', 'develop'])) { $this->app->register(\Laravel\Dusk\DuskServiceProvider::class); } $this->app->singleton('ArieTimmerman\Laravel\SCIMServer\SCIMConfig', SnipeSCIMConfig::class); // this overrides the default SCIM configuration with our own } }