new API structure

core/Api/ApiKeyAPI.class.php

@@ -0,0 +1,191 @@
+<?php
+
+namespace Api {
+
+  use Driver\SQL\Condition\Compare;
+
+  class ApiKeyAPI extends Request {
+
+    protected function apiKeyExists($id) {
+      $sql = $this->user->getSQL();
+      $res = $sql->select($sql->count())
+        ->from("ApiKey")
+        ->where(new Compare("uid", $id))
+        ->where(new Compare("user_id", $this->user->getId()))
+        ->where(new Compare("valid_until", $sql->currentTimestamp(), ">"))
+        ->where(new Compare("active", 1))
+        ->execute();
+
+      $this->success = ($res !== FALSE);
+      $this->lastError = $sql->getLastError();
+
+      if($this->success && $res[0]["count"] === 0) {
+        return $this->createError("This API-Key does not exist.");
+      }
+
+      return $this->success;
+    }
+  }
+}
+
+namespace Api\ApiKey {
+
+  use Api\ApiKeyAPI;
+  use Api\Parameter\Parameter;
+  use DateTime;
+  use Driver\SQL\Condition\Compare;
+  use Exception;
+
+  class Create extends ApiKeyAPI {
+
+    public function __construct($user, $externalCall = false) {
+      parent::__construct($user, $externalCall, array());
+      $this->apiKeyAllowed = false;
+      $this->csrfTokenRequired = true;
+      $this->loginRequired = true;
+    }
+
+    public function execute($values = array()) {
+
+      if(!parent::execute($values)) {
+        return false;
+      }
+
+      $apiKey = generateRandomString(64);
+      $sql = $this->user->getSQL();
+      $validUntil = (new \DateTime())->modify("+30 DAY");
+
+      $this->success = $sql->insert("ApiKey", array("user_id", "api_key", "valid_until"))
+        ->addRow($this->user->getId(), $apiKey, $validUntil)
+        ->returning("uid")
+        ->execute();
+
+      $this->lastError = $sql->getLastError();
+
+      if ($this->success) {
+        $this->result["api_key"] = array(
+          "api_key" => $apiKey,
+          "valid_until" => $validUntil->getTimestamp(),
+          "uid" => $sql->getLastInsertId(),
+        );
+      } else {
+        $this->result["api_key"] = null;
+      }
+      return $this->success;
+    }
+  }
+
+  class Fetch extends ApiKeyAPI {
+
+    public function __construct($user, $externalCall = false) {
+      parent::__construct($user, $externalCall, array());
+      $this->loginRequired = true;
+      $this->csrfTokenRequired = true;
+    }
+
+    public function execute($values = array()) {
+      if(!parent::execute($values)) {
+        return false;
+      }
+
+      $sql = $this->user->getSQL();
+      $res = $sql->select("uid", "api_key", "valid_until")
+        ->from("ApiKey")
+        ->where(new Compare("user_id", $this->user->getId()))
+        ->where(new Compare("valid_until", $sql->currentTimestamp(), ">"))
+        ->where(new Compare("active", true))
+        ->execute();
+
+      $this->success = ($res !== FALSE);
+      $this->lastError = $sql->getLastError();
+
+      if($this->success) {
+        $this->result["api_keys"] = array();
+        foreach($res as $row) {
+          try {
+            $validUntil = (new DateTime($row["valid_until"]))->getTimestamp();
+          } catch (Exception $e) {
+            $validUntil = $row["valid_until"];
+          }
+
+          $this->result["api_keys"][] = array(
+            "uid" => intval($row["uid"]),
+            "api_key" => $row["api_key"],
+            "valid_until" => $validUntil,
+          );
+        }
+      }
+
+      return $this->success;
+    }
+  }
+
+  class Refresh extends ApiKeyAPI {
+
+    public function __construct($user, $externalCall = false) {
+      parent::__construct($user, $externalCall, array(
+        "id" => new Parameter("id", Parameter::TYPE_INT),
+      ));
+      $this->loginRequired = true;
+      $this->csrfTokenRequired = true;
+    }
+
+    public function execute($values = array()) {
+      if(!parent::execute($values)) {
+        return false;
+      }
+
+      $id = $this->getParam("id");
+      if(!$this->apiKeyExists($id))
+        return false;
+
+      $validUntil = (new \DateTime)->modify("+30 DAY");
+      $sql = $this->user->getSQL();
+      $this->success = $sql->update("ApiKey")
+        ->set("valid_until", $validUntil)
+        ->where(new Compare("uid", $id))
+        ->where(new Compare("user_id", $this->user->getId()))
+        ->execute();
+      $this->lastError = $sql->getLastError();
+
+      if ($this->success) {
+        $this->result["valid_until"] = $validUntil->getTimestamp();
+      }
+
+      return $this->success;
+    }
+  }
+
+  class Revoke extends ApiKeyAPI {
+
+    public function __construct($user, $externalCall = false) {
+      parent::__construct($user, $externalCall, array(
+        "id" => new Parameter("id", Parameter::TYPE_INT),
+      ));
+      $this->loginRequired = true;
+      $this->csrfTokenRequired = true;
+    }
+
+    public function execute($aValues = array()) {
+      if(!parent::execute($aValues)) {
+        return false;
+      }
+
+      $id = $this->getParam("id");
+      if(!$this->apiKeyExists($id))
+        return false;
+
+      $sql = $this->user->getSQL();
+      $this->success = $sql->update("ApiKey")
+        ->set("active", false)
+        ->where(new Compare("uid", $id))
+        ->where(new Compare("user_id", $this->user->getId()))
+        ->execute();
+      $this->lastError = $sql->getLastError();
+
+      return $this->success;
+    }
+  }
+
+
+}