67 lines
2.5 KiB
PHP
67 lines
2.5 KiB
PHP
<?php
|
|
defined($security_key) or exit;
|
|
|
|
//------------------------------------------
|
|
// Get user_details
|
|
//------------------------------------------
|
|
$user_credentials = json_decode(decode_payload($input),true);
|
|
//Connect to DB
|
|
$pdo = dbConnect($dbname_users);
|
|
$username = $user_credentials['username'];
|
|
//Define Query
|
|
$stmt = $pdo->prepare('SELECT id, username, password, salesID, partnerhierarchy, view, service, settings, lastlogin, userkey, language FROM users WHERE username = ?');
|
|
//Excute Query
|
|
$stmt->execute([$username]);
|
|
// Check if username exists. Verify user exists then verify
|
|
if ($stmt->rowCount() == 1) {
|
|
$user_data = $stmt->fetch();
|
|
$permission = userRights($user_data['view']);
|
|
$profile = getProfile($user_data['settings'],$permission);
|
|
$password = $user_credentials['password'];
|
|
|
|
if (array_key_exists('resetkey', $user_credentials)){
|
|
//Reset procedure
|
|
//STEP 1.A- Create resetkey
|
|
$headers = array('alg'=>'HS256','typ'=>'JWT');
|
|
$payload = array('username'=>$user_data['username'], 'exp'=>(time() + 1800));
|
|
$resetkey = generate_jwt($headers, $payload);
|
|
//STEP 1.B Store in DB
|
|
$sql = 'UPDATE users SET resetkey = ? WHERE id = ?';
|
|
$stmt = $pdo->prepare($sql);
|
|
$stmt->execute([$resetkey,$user_data['id']]);
|
|
//STEP 2- Send to user
|
|
include_once './assets/mail/email_template_reset.php';
|
|
send_mail($user_data['username'],$subject,$message,'','');
|
|
|
|
} else { //STANDARD LOGIN
|
|
if (password_verify($password, $user_data['password'])) {
|
|
|
|
$token = createCommunicationToken($user_data['service']);
|
|
|
|
$user = array(
|
|
'id' => $user_data['id'],
|
|
'username' => $user_data['username'],
|
|
'salesID' => $user_data['salesID'],
|
|
'partnerhierarchy' => $user_data['partnerhierarchy'],
|
|
'permission' => $permission,
|
|
'profile' => $profile,
|
|
'service' => $user_data['service'],
|
|
'userkey' => $user_data['userkey'],
|
|
'language' => $user_data['language'],
|
|
'token' => $token
|
|
);
|
|
//Encrypt results
|
|
$messages = generate_payload($user);
|
|
//Send results
|
|
print_r($messages);
|
|
} else {
|
|
http_response_code(403); //Not authorized
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
http_response_code(403);//Not authorized
|
|
}
|
|
|
|
?>
|