Initial import

one-api/application/controllers/v1/system/Auth.php

@@ -0,0 +1,119 @@
+<?php
+class Auth extends MY_Controller {
+  var $db_regional;
+  public function index()
+  {
+     echo "AUTH API";
+  }
+  public function __construct()
+  {
+     parent::__construct();
+     $this->db_regional = $this->load->database("regional", true);
+     $this->db_log = $this->load->database("regional_log", true);
+  }
+  function isLogin() {
+    if (! $this->isLogin) {
+      $this->sys_error("Invalid Token");
+    } else {
+      $prm = $this->sys_input;
+      $data = array(
+          "user" => $this->sys_user
+        );
+        $this->sys_ok($data);
+    }
+  }
+  function login() {
+     $prm = $this->sys_input;
+    try {
+      //existing password enc
+      $sm_password = md5($this->one_salt . $prm["password"] . $this->one_salt);
+      $query = $this->db_regional->query("select M_UserID,M_UserUsername, M_UserGroupDashboard, M_UserDefaultT_SampleStationID,
+         M_StaffName,M_UserGroupID
+      from m_user 
+      join m_usergroup ON M_UserM_UserGroupID = M_UserGroupID
+      left join m_staff on M_UserM_StaffID = M_StaffID
+      where M_UserUsername=? and M_UserPassword=?
+      and M_UserIsActive = 'Y'
+      ",array($prm["username"], $sm_password));
+      //echo $query;
+      if (!$query) {
+        $message = $this->db_regional->error();
+        $this->sys_error($message);
+        exit;
+      }
+      $rows = $query->result_array();
+      if (count($rows) > 0 ) {
+        $user = $rows[0];
+        $user['ip'] = $_SERVER['REMOTE_ADDR'];
+        $user['agent'] = $_SERVER['HTTP_USER_AGENT'];
+        $token  = JWT::encode($user,$this->SECRET_KEY);
+        $data = array(
+          "user" => $user,
+          "token" => $token
+        );
+
+        $query = $this->db_regional->query("update m_user SET M_UserIsLoggedIn = 'Y', M_UserLastAccess = now(), M_UserActiveToken = '{$token}' WHERE M_UserID = ?
+        ",array($user['M_UserID']));
+        if (!$query) {
+          $message = $this->db_regional->error();
+          $this->sys_error($message);
+          exit;
+        }
+		
+		    $query = $this->db_log->query("INSERT INTO log_login(Log_LoginDateTime,Log_LoginIP,Log_LoginType,Log_LoginStatus,Log_LoginLogin) VALUES (?,?,?,?,?)
+        ",array(date('Y-m-d H:i:s'), $_SERVER['REMOTE_ADDR'],'LOGIN','SUCCESS',$prm["username"]));
+        if (!$query) {
+          $message = $this->db_regional->error();
+          $this->sys_error($message);
+          exit;
+        }
+
+        $this->sys_ok($data);
+        exit;
+      } 
+	  $query = $this->db_log->query("INSERT INTO log_login(Log_LoginDateTime,Log_LoginIP,Log_LoginType,Log_LoginStatus,Log_LoginLogin) VALUES (?,?,?,?,?)
+        ",array(date('Y-m-d H:i:s'),$this->input->ip_address(),'LOGIN','FAILED',$prm["username"]));
+        if (!$query) {
+          $message = $this->db_regional->error();
+          $this->sys_error($message);
+          exit;
+        }
+      $this->sys_error_db("Invalid UserName / Password");
+    } catch(Exception $exc) {
+      $message = $exc->getMessage();
+      $this->sys_error($message);
+    }
+  }
+
+  function logout() 
+  {
+    $prm = $this->sys_input;
+    try 
+    {
+      
+      $query = $this->db_regional->query("
+        UPDATE m_user 
+        SET M_UserIsLoggedIn = 'N', M_UserActiveToken = null
+        WHERE M_UserID = ?", 
+      array($this->sys_user['M_UserID']));
+
+      if (!$query) 
+      {
+        $message = $this->db_regional->error();
+        $this->sys_error($message);
+        exit;
+      }
+        
+      $this->db_log->query("INSERT INTO log_login(Log_LoginDateTime,Log_LoginIP,Log_LoginType,Log_LoginStatus,Log_LoginLogin) VALUES (?,?,?,?,?)
+        ",array(date('Y-m-d H:i:s'), $_SERVER['REMOTE_ADDR'], 'LOGOUT', 'SUCCESS', $this->sys_user['M_UserUsername']));
+      $this->sys_ok("OK");
+
+    } 
+    catch(Exception $exc) 
+    {
+      $message = $exc->getMessage();
+      $this->sys_error($message);
+    }
+  }
+}
+?>