Update: 2026-07-12 18:53:59

2026-07-12 18:53:59 +03:00
parent 8cd4a4b57e
commit 653d73422f
54 changed files with 2078 additions and 436 deletions
@@ -0,0 +1,61 @@
+<?php
+// transit/driver/activate_by_app.php — السائق يفعّل حسابه بتوكن الدعوة (عبر JWT)
+// POST: invite_token
+// المصادقة: JWT السائق الرئيسي من connect_app.php
+
+require_once __DIR__ . '/../../transit/connect_app.php';
+
+if ($transit_user_role !== 'driver') jsonError('Only drivers can access this endpoint', 403);
+
+$inviteToken = filterRequest('invite_token');
+if (!$inviteToken) jsonError('invite_token is required', 400);
+
+// البحث بالتوكن فقط — لا نثق بأي معرّف آخر من العميل
+$st = $transit_con->prepare(
+    "SELECT d.id, d.org_id, d.name, d.status, o.name_ar AS org_name
+     FROM transit_drivers d
+     JOIN transit_orgs o ON o.id = d.org_id
+     WHERE d.invite_token=? LIMIT 1"
+);
+$st->execute([$inviteToken]);
+$driver = $st->fetch();
+
+if (!$driver) jsonError('Invalid invite token', 404);
+if ($driver['status'] === 'suspended') jsonError('Account suspended', 403);
+
+// تحقق أن main_driver_id ليس مضبوطاً لحساب آخر
+if ($driver['status'] === 'active') {
+    $chk = $transit_con->prepare(
+        "SELECT main_driver_id FROM transit_drivers WHERE id=? LIMIT 1"
+    );
+    $chk->execute([$driver['id']]);
+    $row = $chk->fetch();
+    if ($row && $row['main_driver_id'] && (string)$row['main_driver_id'] !== (string)$transit_user_id) {
+        jsonError('This invite token is already linked to another account', 409);
+    }
+    // إذا كان نفس الحساب — رد نجاح مباشرة
+    if ($row && (string)$row['main_driver_id'] === (string)$transit_user_id) {
+        jsonSuccess([
+            'driver_id'  => (int)$driver['id'],
+            'org_id'     => (int)$driver['org_id'],
+            'org_name'   => $driver['org_name'],
+            'name'       => $driver['name'],
+        ], 'Already activated');
+    }
+}
+
+// ضبط main_driver_id وتفعيل الحساب
+$transit_con->prepare(
+    "UPDATE transit_drivers
+     SET main_driver_id=?, status='active', activated_at=NOW(), invite_token=NULL, updated_at=NOW()
+     WHERE id=?"
+)->execute([(string)$transit_user_id, $driver['id']]);
+
+appLog("[TRANSIT][DRIVER] activated driver #{$driver['id']} (org#{$driver['org_id']}) linked to main_driver_id={$transit_user_id}", 'INFO');
+
+jsonSuccess([
+    'driver_id'  => (int)$driver['id'],
+    'org_id'     => (int)$driver['org_id'],
+    'org_name'   => $driver['org_name'],
+    'name'       => $driver['name'],
+], 'Account activated successfully. Welcome to مواصلاتي!');