131 lines
3.0 KiB
PHP
131 lines
3.0 KiB
PHP
<?php
|
|
|
|
require(__DIR__ . '/DatabaseController.php');
|
|
|
|
class ApiController {
|
|
|
|
/**
|
|
* method for pretty jsonsuccess output
|
|
*
|
|
* @param array $data
|
|
* @return string
|
|
*/
|
|
public function jsonSuccess($data) {
|
|
return json_encode(
|
|
[
|
|
'status' => 'success',
|
|
'data' => $data,
|
|
],
|
|
JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
|
|
);
|
|
}
|
|
|
|
/**
|
|
* method for pretty jsonerror output
|
|
*
|
|
* @param array $error
|
|
* @return string
|
|
*/
|
|
public function jsonError ($error) {
|
|
echo json_encode(
|
|
[
|
|
'status' => 'failed',
|
|
'data' => 'none',
|
|
'error' => $error
|
|
],
|
|
JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE
|
|
);
|
|
}
|
|
|
|
/**
|
|
* get authentication key out database
|
|
*
|
|
* @return array
|
|
*/
|
|
private function getAuthKey () {
|
|
$validTokens = DatabaseShow(
|
|
"API_Credentials",
|
|
"TOKEN"
|
|
);
|
|
|
|
return array_column($validTokens, 'TOKEN');
|
|
}
|
|
|
|
/**
|
|
* url authentication method via token and optional parameter function
|
|
*
|
|
* @param string $token
|
|
* @param string $function
|
|
* @return void
|
|
*/
|
|
public function urlAuth ($token, $function = '') {
|
|
|
|
$validTokens = $this->getAuthKey();
|
|
if (!in_array($token, $validTokens)) {
|
|
http_response_code(401);
|
|
$error = json_encode([
|
|
"error" => "Unauthorized",
|
|
"debug_received_token" => $token,
|
|
]);
|
|
|
|
echo $this->jsonError($error);
|
|
|
|
DatabaseInsert(
|
|
"API_LOGS",
|
|
"CLIENT_IP, TOKEN, API, FUNKTION, JSON",
|
|
(new getSpecificData())->getClientIP(),
|
|
$token,
|
|
(new getSpecificData())->getRequestURL(),
|
|
$function,
|
|
$error
|
|
);
|
|
|
|
errorMail(
|
|
"API Login failed",
|
|
$error,
|
|
true,
|
|
);
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
public function requestSave($function = '') {
|
|
DatabaseInsert(
|
|
"API_LOGS",
|
|
"CLIENT_IP, TOKEN, API, FUNKTION, JSON",
|
|
(new getSpecificData())->getClientIP(),
|
|
$_GET['token'],
|
|
(new getSpecificData())->getRequestURL(),
|
|
$function,
|
|
'{"status": "success"}',
|
|
);
|
|
}
|
|
|
|
/**
|
|
* create new api token
|
|
*
|
|
*/
|
|
private function createToken() {
|
|
return bin2hex(random_bytes(32));
|
|
}
|
|
|
|
/**
|
|
* save created api token
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function saveToken() {
|
|
try {
|
|
DatabaseInsert(
|
|
"API_Credentials",
|
|
"TOKEN, BENUTZER",
|
|
$this->createToken(),
|
|
"API-User"
|
|
);
|
|
} catch (Exception $error) {
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
} |