module shop client

kernel/modules/module_shop_client/controllers/ModuleShopClientController.php

@@ -15,6 +15,8 @@ use kernel\Mailing;
 use kernel\modules\module_shop_client\services\ModuleShopClientService;
 use kernel\Request;
 use kernel\services\ModuleService;
+use kernel\services\ModuleShopService;
+use kernel\services\TokenService;
 use PHPMailer\PHPMailer\Exception;
 
 class ModuleShopClientController extends AdminController
@@ -129,19 +131,50 @@ class ModuleShopClientController extends AdminController
         $request = new Request();
         $address = $request->post("email");
 
-        $mailing = new Mailing();
-        $mailing->send_html("login_by_code.php", ['code' => mt_rand(100000, 999999)], [
-            'address' => $address,
-            'subject' => "Код авторизации",
-            "from_name" => $_ENV['APP_NAME']
-        ]);
+//        $mailing = new Mailing();
+//        $mailing->send_html("login_by_code.php", ['code' => mt_rand(100000, 999999)], [
+//            'address' => $address,
+//            'subject' => "Код авторизации",
+//            "from_name" => $_ENV['APP_NAME']
+//        ]);
 
-        $this->cgView->render('enter_code.php', ['email' => $address]);
+        $moduleShopService = new ModuleShopService();
+        $result = $moduleShopService->email_auth($address);
+
+        if ($result['status'] == 'success'){
+            $this->cgView->render('enter_code.php', ['email' => $address]);
+        }
+
+        $this->cgView->render('module_shop_error_connection.php', ['email' => $address]);
     }
 
     public function actionCodeCheck(): void
     {
-        Debug::dd(123);
+        $request = new Request();
+        $code = $request->post("code");
+
+//        $mailing = new Mailing();
+//        $mailing->send_html("login_by_code.php", ['code' => mt_rand(100000, 999999)], [
+//            'address' => $address,
+//            'subject' => "Код авторизации",
+//            "from_name" => $_ENV['APP_NAME']
+//        ]);
+
+        $moduleShopService = new ModuleShopService();
+        $result = $moduleShopService->code_check($code);
+
+        if (isset($result['access_token'])){
+
+            $envFile = \EnvEditor\EnvFile::loadFrom(ROOT_DIR . "/.env");
+
+            $envFile->setValue("MODULE_SHOP_TOKEN", $result['access_token']);
+
+            $envFile->saveTo(ROOT_DIR . "/.env");
+
+            $this->cgView->render('success_login.php');
+        }
+
+        $this->cgView->render('module_shop_error_connection.php');
     }
 
 }

kernel/modules/module_shop_client/views/success_login.php

@@ -0,0 +1,9 @@
+<?php
+
+use itguild\forms\ActiveForm;
+
+\kernel\widgets\ModuleTabsWidget::create()->run();
+
+echo \kernel\helpers\Html::h(2, "Авторизация прошла успешно");
+echo \kernel\helpers\Html::a("/admin", ['class' => 'btm btm-primary']);
+

kernel/modules/secure/controllers/SecureRestController.php

@@ -94,7 +94,7 @@ class SecureRestController extends RestController
         }
 
         $res = [
-            "code" => $secretCode->code,
+            "status" => "success",
             "code_expires_at" => $secretCode->code_expires_at,
         ];
 
@@ -105,23 +105,26 @@ class SecureRestController extends RestController
     /**
      * @throws Exception
      */
-    public function actionCodeCheck(): void
+    #[NoReturn] public function actionCodeCheck(): void
     {
         $request = new Request();
+        $code = $request->post("code");
 
-        if (isset($_COOKIE['user_email'])) {
-            $user = User::where('email', $_COOKIE["user_email"])->first();
-            if (!$user) {
-                throw new exception("User not found.");
-            }
-            $code = $request->post("code");
-            $secretCode = SecureService::getByField("user_id", $user->id);
-            if ($secretCode->code == $code && time() <= strtotime($secretCode->code_expires_at)) {
-                setcookie('user_id', $user->id, time() + 60 * 60 * 24, '/', $_SERVER['SERVER_NAME'], false);
-            } else {
-                throw new exception("incorrect code");
+        $model = SecretCode::where("code", $code)->first();
+        if (time() <= strtotime($model->code_expires_at)) {
+            $user = $this->model->where("id", $model->user_id)->first();
+            if ($user){
+                $user->access_token_expires_at = date("Y-m-d H:i:s", strtotime(App::$secure['token_expired_time']));
+                $user->access_token = SecureService::generateAccessToken();
+                $user->save();
+                $this->renderApi([
+                    "access_token" => $user->access_token,
+                    "access_token_expires_at" => $user->access_token_expires_at,
+                ]);
             }
         }
+
+        $this->renderApi(['status' => 'error', 'message' => 'incorrect code']);
     }
 
 }

kernel/modules/secure/services/SecureService.php

@@ -2,11 +2,13 @@
 
 namespace kernel\modules\secure\services;
 
+use kernel\App;
 use kernel\FormModel;
 use kernel\helpers\Debug;
 use kernel\modules\secure\models\SecretCode;
 use kernel\modules\user\models\User;
 use kernel\modules\user\service\UserService;
+use kernel\services\TokenService;
 
 class SecureService
 {
@@ -38,4 +40,15 @@ class SecureService
         return SecretCode::where($field, $value)->first();
     }
 
+    public static function generateAccessToken(): string
+    {
+        return match (App::$secure['token_type']) {
+            "JWT" => TokenService::JWT($_ENV['SECRET_KEY'], 'HS256'),
+            "md5" => TokenService::md5(),
+            "crypt" => TokenService::crypt(),
+            "hash" => TokenService::hash('sha256'),
+            default => TokenService::random_bytes(20),
+        };
+    }
+
 }