Cedric/mon-petit-pari
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Actualiser api/config.php

Browse Source
This commit is contained in:
Cedric
2026-07-21 16:17:52 +02:00
parent cd94271bac
commit 69ee7a9542
1 changed files with 14 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/config.php
+14 -16
View File
@@ -27,7 +27,6 @@ if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
// Connexion à la base de données // Connexion à la base de données
function getDB() { function getDB() {
static $pdo = null; static $pdo = null;
if ($pdo === null) { if ($pdo === null) {
try { try {
$dsn = "mysql:host=" . DB_HOST . ";dbname=" . DB_NAME . ";charset=" . DB_CHARSET; $dsn = "mysql:host=" . DB_HOST . ";dbname=" . DB_NAME . ";charset=" . DB_CHARSET;
@@ -43,18 +42,26 @@ function getDB() {
exit(); exit();
} }
} }
return $pdo; return $pdo;
} }
// Encodage Base64url pour JWT conformes
function base64url_encode($data) {
return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
}
function base64url_decode($data) {
return base64_decode(strtr($data, '-_', '+/'));
}
// Fonction pour générer un token JWT simple // Fonction pour générer un token JWT simple
function generateToken($userId) { function generateToken($userId) {
$header = base64_encode(json_encode(['alg' => 'HS256', 'typ' => 'JWT'])); $header = base64url_encode(json_encode(['alg' => 'HS256', 'typ' => 'JWT']));
$payload = base64_encode(json_encode([ $payload = base64url_encode(json_encode([
'user_id' => $userId, 'user_id' => $userId,
'exp' => time() + JWT_EXPIRY 'exp' => time() + JWT_EXPIRY
])); ]));
$signature = hash_hmac('sha256', "$header.$payload", JWT_SECRET); $signature = base64url_encode(hash_hmac('sha256', "$header.$payload", JWT_SECRET, true));
return "$header.$payload.$signature"; return "$header.$payload.$signature";
} }
@@ -62,23 +69,17 @@ function generateToken($userId) {
function verifyToken($token) { function verifyToken($token) {
$parts = explode('.', $token); $parts = explode('.', $token);
if (count($parts) !== 3) return false; if (count($parts) !== 3) return false;
list($header, $payload, $signature) = $parts; list($header, $payload, $signature) = $parts;
$expectedSignature = base64url_encode(hash_hmac('sha256', "$header.$payload", JWT_SECRET, true));
$expectedSignature = hash_hmac('sha256', "$header.$payload", JWT_SECRET);
if (!hash_equals($expectedSignature, $signature)) return false; if (!hash_equals($expectedSignature, $signature)) return false;
$data = json_decode(base64url_decode($payload), true);
$data = json_decode(base64_decode($payload), true);
if (!$data || !isset($data['exp']) || $data['exp'] < time()) return false; if (!$data || !isset($data['exp']) || $data['exp'] < time()) return false;
return $data['user_id']; return $data['user_id'];
} }
// Fonction pour obtenir l'utilisateur actuel // Fonction pour obtenir l'utilisateur actuel
function getCurrentUser() { function getCurrentUser() {
$authHeader = ''; $authHeader = '';
// Détection universelle des headers d'autorisation
if (isset($_SERVER['HTTP_AUTHORIZATION'])) { if (isset($_SERVER['HTTP_AUTHORIZATION'])) {
$authHeader = $_SERVER['HTTP_AUTHORIZATION']; $authHeader = $_SERVER['HTTP_AUTHORIZATION'];
} elseif (isset($_SERVER['REDIRECT_HTTP_AUTHORIZATION'])) { } elseif (isset($_SERVER['REDIRECT_HTTP_AUTHORIZATION'])) {
@@ -87,11 +88,9 @@ function getCurrentUser() {
$headers = getallheaders(); $headers = getallheaders();
$authHeader = $headers['Authorization'] ?? ''; $authHeader = $headers['Authorization'] ?? '';
} }
if (preg_match('/Bearer\s+(.*)$/i', $authHeader, $matches)) { if (preg_match('/Bearer\s+(.*)$/i', $authHeader, $matches)) {
$token = $matches[1]; $token = $matches[1];
$userId = verifyToken($token); $userId = verifyToken($token);
if ($userId) { if ($userId) {
$db = getDB(); $db = getDB();
$stmt = $db->prepare("SELECT id, username, email, role, points FROM users WHERE id = ?"); $stmt = $db->prepare("SELECT id, username, email, role, points FROM users WHERE id = ?");
@@ -99,7 +98,6 @@ function getCurrentUser() {
return $stmt->fetch(); return $stmt->fetch();
} }
} }
return null; return null;
} }