130 lines
3.5 KiB
PHP
Executable File
130 lines
3.5 KiB
PHP
Executable File
<?php
|
|
$debug = true;
|
|
|
|
if ($debug) {
|
|
ini_set("display_errors", 1);
|
|
ini_set("display_startup_errors", 1);
|
|
error_reporting(E_ALL);
|
|
}
|
|
// API Main Library
|
|
class gbAPI {
|
|
private $db;
|
|
|
|
function __construct($authRequired) {
|
|
define("APP_PATH", __DIR__ . "/../");
|
|
|
|
if ($authRequired) {
|
|
if (!$this->checkAuth()) {
|
|
$status = 401;
|
|
$data = [
|
|
"error" => "unauthorized",
|
|
"error_text" => "Authentication failed."
|
|
];
|
|
|
|
$this->answer($status, $data);
|
|
}
|
|
}
|
|
}
|
|
|
|
function getConfig() {
|
|
return parse_ini_file(APP_PATH . ".env");
|
|
}
|
|
|
|
function generateCookieToken($username) {
|
|
$config = $this->getConfig();
|
|
|
|
// Generate Token
|
|
$payload = [
|
|
"user" => $username,
|
|
"auth" => true
|
|
];
|
|
$string = json_encode($payload);
|
|
$secret = $config["COOKIE_TOKEN_SIGNATURE"];
|
|
|
|
return hash_hmac("sha256", $string, $secret);
|
|
}
|
|
|
|
function generateAPIToken($username) {
|
|
$config = $this->getConfig();
|
|
|
|
// Generate Token
|
|
$payload = [
|
|
"user" => $username,
|
|
"auth" => true
|
|
];
|
|
$string = json_encode($payload);
|
|
$secret = $config["API_TOKEN_SIGNATURE"];
|
|
|
|
return hash_hmac("sha256", $string, $secret);
|
|
}
|
|
|
|
function checkAuth() {
|
|
if (!isset($_SERVER["HTTP_X_API_KEY"]) && !isset($_COOKIE["auth_token"])) {
|
|
return false;
|
|
}elseif (isset($_COOKIE["auth_token"]) && isset($_COOKIE["username"])) {
|
|
// Check Token
|
|
$username = $_COOKIE["username"];
|
|
$expected = $this->generateCookieToken($username);
|
|
$given = $_COOKIE["auth_token"];
|
|
|
|
$result = hash_equals($expected, $given);
|
|
if ($result) {
|
|
return true;
|
|
}
|
|
}elseif (isset($_SERVER["HTTP_X_API_KEY"])) {
|
|
// Decode Token
|
|
$payload = json_decode(base64_decode($_SERVER["HTTP_X_API_KEY"]), true);
|
|
$username = $payload["username"];
|
|
|
|
$given = $payload["auth_token"];
|
|
$expected = $this->generateAPIToken($username);
|
|
|
|
$result = hash_equals($expected, $given);
|
|
if ($result) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
function answer($status, $data = []) {
|
|
http_response_code($status);
|
|
Header ("Content-Type: application/json; charset=UTF-8");
|
|
|
|
$data = json_encode($data);
|
|
|
|
$json = '{"status":' . $status . ',"data":' . $data . '}';
|
|
die($json);
|
|
}
|
|
|
|
function dbCommand($command, $expectResult, $stmtArgsRequired = false, $stmtArgs = []) {
|
|
if (isset($this->db)) {
|
|
$db = $this->db;
|
|
}else{
|
|
$config = $this->getConfig();
|
|
$db_name = $config["DB_FILE"];
|
|
$db_path = APP_PATH . $db_name;
|
|
|
|
$db = new PDO("sqlite:" . $db_path);
|
|
$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
|
|
}
|
|
|
|
$stmt = $db->prepare($command);
|
|
$stmt->execute($stmtArgs);
|
|
|
|
if ($expectResult) {
|
|
$result = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
|
|
|
return $result;
|
|
}
|
|
}
|
|
|
|
function getSetting($key) {
|
|
$command = "SELECT name, value FROM settings WHERE name = :name";
|
|
|
|
$value = $this->dbCommand($command, true, true, [":name" => $key]);
|
|
return $value;
|
|
}
|
|
}
|