Update: 2026-07-22 00:27:49

stress_test/generate_mock_data.php

@@ -2,12 +2,11 @@
 /**
  * generate_mock_data.php
  * Standalone JWT generator — ZERO external dependencies.
- * Generates HS256 JWT using pure PHP (no composer/vendor needed).
+ * Generates HS256 JWT matching Siro JwtService verification logic.
  */
 
-// Show errors so we can debug
 error_reporting(E_ALL);
-ini_set('display_errors', '1');
+ini_set('display_errors', '0');
 
 // ── Load .env ──
 $loadedFiles = [];
@@ -27,27 +26,21 @@ function loadEnvFile(string $path): void {
     }
 }
 
-// Try multiple .env locations
 loadEnvFile('/home/location/env/.env');
 loadEnvFile(dirname(__DIR__) . '/backend/.env');
 
-// ── Resolve JWT secret ──
 function getJwtSecret(): string {
-    // Priority 1: key file
     $keyPath = getenv('JWT_SECRET_KEY_PATH');
     if ($keyPath && file_exists($keyPath)) {
         return trim(file_get_contents($keyPath));
     }
-    // Priority 2: JWT_SECRET_KEY env var
     $key = getenv('JWT_SECRET_KEY') ?: ($_ENV['JWT_SECRET_KEY'] ?? '');
     if ($key) return $key;
-    // Priority 3: JWT_SECRET env var (backend .env uses this)
     $key = getenv('JWT_SECRET') ?: ($_ENV['JWT_SECRET'] ?? '');
     if ($key) return $key;
     return '';
 }
 
-// ── Pure PHP HS256 JWT (no libraries needed) ──
 function base64url_encode(string $data): string {
     return rtrim(strtr(base64_encode($data), '+/', '-_'), '=');
 }
@@ -59,21 +52,40 @@ function generate_jwt(string $secret, array $payload): string {
     return "$header.$body.$sig";
 }
 
-// ── Main ──
 $secret = getJwtSecret();
 if (empty($secret)) {
-    echo json_encode(['error' => 'JWT secret not found in any .env', 'files_checked' => $loadedFiles, 'jwt' => '']);
-    // Do not exit with 1 so Node.js can print the JSON error
+    echo json_encode(['error' => 'JWT secret not found in any .env', 'jwt' => '']);
     exit(0);
 }
 
-$driverId = $argv[1] ?? '999999';
+$userId = $argv[1] ?? '999999';
+$role   = $argv[2] ?? 'driver';
 
-$jwt = generate_jwt($secret, [
-    'sub'  => (string)$driverId,
-    'role' => 'driver',
-    'iat'  => time(),
-    'exp'  => time() + 86400,
+$aud = ($role === 'driver') ? (getenv('allowedDriver2') ?: 'driver-app:ios') : (getenv('allowed2') ?: 'passenger-app:ios');
+$fpPepper = getenv('FP_PEPPER') ?: ($_ENV['FP_PEPPER'] ?? '');
+$fpHeader = 'mock_device_fp_' . $userId;
+$fpInToken = $fpPepper ? hash('sha256', $fpHeader . $fpPepper) : null;
+
+$payload = [
+    'iss'        => getenv('APP_ISSUER') ?: 'SiroApp',
+    'aud'        => $aud,
+    'user_id'    => (string)$userId,
+    'sub'        => (string)$userId,
+    'role'       => $role,
+    'token_type' => 'access',
+    'jti'        => bin2hex(random_bytes(16)),
+    'iat'        => time(),
+    'exp'        => time() + 86400,
+];
+if ($fpInToken) {
+    $payload['fingerPrint'] = $fpInToken;
+}
+
+$jwt = generate_jwt($secret, $payload);
+
+echo json_encode([
+    'user_id' => $userId,
+    'role'    => $role,
+    'jwt'     => $jwt,
+    'fp'      => $fpHeader
 ]);
-
-echo json_encode(['driver_id' => $driverId, 'jwt' => $jwt]);