web-base/core/Api/RefreshApiKey.class.php

<?php

namespace Api;

use \Api\Parameter\Parameter;
use \Driver\SQL\Condition\Compare;

class RefreshApiKey extends Request {

  public function __construct($user, $externCall = false) {
    parent::__construct($user, $externCall, array(
      "id" => new Parameter("id", Parameter::TYPE_INT),
    ));
    $this->loginRequired = true;
  }

  private function apiKeyExists() {
    $id = $this->getParam("id");

    $sql = $this->user->getSQL();
    $res = $sql->select($sql->count())
      ->from("ApiKey")
      ->where(new Compare("uid", $id))
      ->where(new Compare("user_id", $this->user->getId()))
      ->where(new Compare("valid_until", $sql->currentTimestamp(), ">"))
      ->where(new Compare("active", 1))
      ->execute();

    $this->success = ($res !== FALSE);
    $this->lastError = $sql->getLastError();

    if($this->success && $res[0]["count"] === 0) {
      $this->success = false;
      $this->lastError = "This API-Key does not exist.";
    }

    return $this->success;
  }

  public function execute($values = array()) {
    if(!parent::execute($values)) {
      return false;
    }

    $id = $this->getParam("id");
    if(!$this->apiKeyExists())
      return false;

    $validUntil = (new \DateTime)->modify("+30 DAY");
    $sql = $this->user->getSQL();
    $this->success = $sql->update("ApiKey")
      ->set("valid_until", $validUntil)
      ->where(new Compare("uid", $id))
      ->where(new Compare("user_id", $this->user->getId()))
      ->execute();
    $this->lastError = $sql->getLastError();

    if ($this->success) {
      $this->result["valid_until"] = $validUntil->getTimestamp();
    }

    return $this->success;
  }
};

?>