Refactor user session handling and permissions management
- Updated session variables to use 'authorization' array instead of 'username' for user identification across multiple files. - Introduced a new function `getUserPermissions` to consolidate user permissions retrieval based on assigned roles. - Modified API calls to use the new authorization structure and updated endpoints to v2. - Enhanced language support by adding 'PL' to the list of supported languages. - Cleaned up redundant code and improved session management during user login and registration processes. - Added a new API endpoint for fetching user permissions based on user ID.
This commit is contained in:
12
reset.php
12
reset.php
@@ -62,12 +62,10 @@ if ($_POST['submit'] === 'Reset' && $_POST['username'] !='EMP-updater') {
|
||||
// Validate credentials
|
||||
if (empty($username_err)){
|
||||
$data = json_encode(array("username" => $username, "resetkey" => ''), JSON_UNESCAPED_UNICODE);
|
||||
//Secure data
|
||||
$payload = generate_payload($data);
|
||||
//API call
|
||||
$responses = ioServer('/v1/authorization', $payload);
|
||||
$responses = ioServer('/v2/authorization', $data);
|
||||
//Decode Payload
|
||||
if (!empty($responses)){$responses = decode_payload($responses);}else{$responses = '400';}
|
||||
if (!empty($responses)){$responses = json_decode($responses);}else{$responses = '400';}
|
||||
|
||||
if ($responses === 'NOK'){
|
||||
$username_err = $password_err_1 ?? 'Not authorized, please retry';
|
||||
@@ -107,11 +105,9 @@ if (isset($_POST['resetkey']) && $_POST['resetkey'] !='' && $_POST['password_upd
|
||||
else {
|
||||
//UPDATE PASSWORD
|
||||
$data = json_encode(array("password" => $password, "resetkey" => $resetkey), JSON_UNESCAPED_UNICODE);
|
||||
//Secure data
|
||||
$payload = generate_payload($data);
|
||||
//API call
|
||||
$responses = ioServer('/v1/authorization', $payload);
|
||||
if (!empty($responses)){$responses = decode_payload($responses);}else{$responses = '400';}
|
||||
$responses = ioServer('/v2/authorization', $data);
|
||||
if (!empty($responses)){$responses = json_decode($responses);}else{$responses = '400';}
|
||||
|
||||
if ($responses === 'NOK'){
|
||||
$username_err = $password_err_1 ?? 'Not authorized, please retry';
|
||||
|
||||
Reference in New Issue
Block a user