byecorps
/
id
mirror of https://github.com/byecorps/id.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add PHP_SESSID support to api to allow JavaScript on the main website to do crazy auto-save shit

This commit is contained in:
Bye 2024-03-17 18:01:45 +00:00
parent 74d351e9cd
commit 259970d8d5
1 changed files with 20 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
api_handler.php
View File

@ -7,6 +7,8 @@ if (array_key_exists('HTTP_AUTHORIZATION', $_SERVER)) {
$access_token = str_replace("Bearer ", "", $_SERVER['HTTP_AUTHORIZATION']); $access_token = str_replace("Bearer ", "", $_SERVER['HTTP_AUTHORIZATION']);
} }
if (!empty($access_token)) { if (!empty($access_token)) {
// Check who the access token belongs to // Check who the access token belongs to
$token = db_execute("SELECT * FROM tokens WHERE access_token = ?", [$access_token]); $token = db_execute("SELECT * FROM tokens WHERE access_token = ?", [$access_token]);
@ -30,12 +32,23 @@ function check_authorisation($token): int
$token_row = db_execute("SELECT * FROM tokens WHERE access_token = ?", [$token]); $token_row = db_execute("SELECT * FROM tokens WHERE access_token = ?", [$token]);
if (null == $token_row) { if (null == $token_row) {
return 0; if (array_key_exists('auth', $_SESSION)) {
if ($_SESSION['auth']) {
$token_row = [
"type" => "dangerous"
];
} else {
return 0;
}
} else {
return 0;
}
} }
return match ($token_row['type']) { return match ($token_row['type']) {
"basic" => 1, "dangerous" => 22,
default => 0, "basic" => 1,
default => 0,
}; };
} }
@ -64,11 +77,13 @@ function get_avatar(): array
]; ];
} }
$user_id = $query['id']; $user_id = $query['id'];
return [];
} }
// User (REQUIRES AUTHORISATION) // User (REQUIRES AUTHORISATION)
function api_user_info() { function api_user_info(): array
{
global $access_token, $token_owner; global $access_token, $token_owner;
// Authorisation levels: // Authorisation levels:
// `display_name` = 1 (basic) // `display_name` = 1 (basic)
@ -86,9 +101,7 @@ function api_user_info() {
if (null != $data) { if (null != $data) {
return [ return [
"response_code" => 200, "response_code" => 200,
"id" => $data['id'], "data" => $data
"email" => $data['email'],
"display_name" => $data['display_name']
]; ];
} }