creating API, Work in Progress

2024-02-19 16:28:55 +07:00
parent ade714e2ae
commit fe082258cd
8 changed files with 465 additions and 302 deletions
--- a/system/api.php
+++ b/system/api.php
@ -0,0 +1,105 @@
+<?php
+
+/**
+ *  PHP Mikrotik Billing (https://github.com/hotspotbilling/phpnuxbill/)
+ *  by https://t.me/ibnux
+ *
+ * This File is for API Access
+ **/
+
+
+if ($_SERVER['REQUEST_METHOD'] === "OPTIONS" || $_SERVER['REQUEST_METHOD'] === "HEAD") {
+    header('Access-Control-Allow-Origin: *');
+    header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization");
+    header("HTTP/1.1 200 OK");
+    die();
+}
+
+include "../init.php";
+
+$isApi = true;
+
+// Dummy Class
+$ui = new class($key)
+{
+    var $assign = [];
+    function display($key)
+    {
+    }
+    function assign($key, $value)
+    {
+        $this->assign[$key] = $value;
+    }
+
+    function get($key, )
+    {
+        if(isset($this->assign[$key])){
+            return $this->assign[$key];
+        }
+        return '';
+    }
+};
+
+$req = _get('r');
+# a/c.id.time.md5
+# md5(a/c.id.time.$api_secret)
+$token = _get('token');
+$routes = explode('/', $req);
+$handler = $routes[0];
+if ($handler == '') {
+    $handler = 'default';
+}
+
+if(empty($token)){
+    showResult(false, Lang::T("Token is invalid"));
+}
+
+if($token == $config['api_key']){
+    $admin = ORM::for_table('tbl_users')->where('user_type','SuperAdmin')->find_one($id);
+    if(empty($admin)){
+        $admin = ORM::for_table('tbl_users')->where('user_type','Admin')->find_one($id);
+        if(empty($admin)){
+            showResult(false, Lang::T("Token is invalid"));
+        }
+    }
+}else{
+    # validate token
+    list($tipe, $uid, $time, $md5) = explode('.', $token);
+    if ($md5 != md5($uid . '.' . $time . '.' . $api_secret)) {
+        showResult(false, Lang::T("Token is invalid"));
+    }
+
+    #cek token expiration
+    if ($time != 0 && time() > $time) {
+        showResult(false, Lang::T("Token Expired"), [], ['login' => true]);
+    }
+
+    if($tipe=='a'){
+        $_SESSION['aid'] = $uid;
+    }else if($tipe=='c'){
+        $_SESSION['uid'] = $uid;
+    }else{
+        showResult(false, Lang::T("Unknown Token"), [], ['login' => true]);
+    }
+}
+
+if($handler == 'isValid'){
+    showResult(true, Lang::T("Token is valid"));
+}
+
+function showResult($success, $message = '', $result = [], $meta = [])
+{
+    header("Content-Type: Application/json; charset=utf-8");
+    die(json_encode(array('success' => $success, 'message' => $message, 'result' => $result, 'meta' => $meta)));
+}
+
+try {
+    $sys_render = File::pathFixer($root_path.'system/controllers/' . $handler . '.php');
+    if (file_exists($sys_render)) {
+        include($sys_render);
+    }else{
+        showResult(false, Lang::T('Command not found'));
+    }
+} catch (Exception $e) {
+    showResult(false, $e->getMessage());
+}