127 lines
5.6 KiB
PHP
127 lines
5.6 KiB
PHP
<?php
|
|
// loginUsingCredentialsWithoutGooglePassenger.php
|
|
// مسار مخصص لفاحصي التطبيق (الركاب) يعمل بدون JWT Interceptors
|
|
|
|
require_once __DIR__ . '/../../core/bootstrap.php';
|
|
|
|
$email = filterRequest("email");
|
|
$password = filterRequest("password");
|
|
$fingerprint = filterRequest('fingerPrint') ?? filterRequest('fingerprint');
|
|
$audience = filterRequest('aud') ?: 'siro_passenger';
|
|
|
|
// 1. حد معدل الطلبات مطبّق على الجميع (الحد مرفوع إلى 30/دقيقة في RateLimiter)
|
|
$rateLimiter = new RateLimiter($redis);
|
|
$rateLimiter->enforce(RateLimiter::identifier(), 'tester_login');
|
|
|
|
// 2. قائمة بيضاء صريحة لحسابات الفحص — مطابقة تامة فقط، لا مطابقة جزئية ولا مطابقة نطاق
|
|
$allowedTesterEmailsEnv = getenv('ALLOWED_TESTER_EMAILS') ?: ($_ENV['ALLOWED_TESTER_EMAILS'] ?? '');
|
|
$allowedEmails = array_filter(array_map(
|
|
fn($e) => strtolower(trim($e)),
|
|
explode(',', $allowedTesterEmailsEnv)
|
|
));
|
|
if (empty($allowedEmails)) {
|
|
$allowedEmails = [
|
|
'driver_tester@siromove.com',
|
|
'passenger_tester@siromove.com',
|
|
];
|
|
}
|
|
|
|
$cleanEmail = strtolower(trim((string) $email));
|
|
$isTester = in_array($cleanEmail, $allowedEmails, true);
|
|
|
|
if (!$email || !$password) {
|
|
echo json_encode(["status" => "failure", "message" => "Email and password are required"]);
|
|
exit();
|
|
}
|
|
|
|
try {
|
|
$con = Database::get('main');
|
|
|
|
// تشفير الإيميل للبحث في قاعدة البيانات
|
|
$encryptedEmail = $encryptionHelper->encryptData($email);
|
|
global $blindIndex;
|
|
$emailBidx = $blindIndex ? $blindIndex->index('passengers.email', $email) : null;
|
|
|
|
// Auto-seed/create tester passenger logic removed for security
|
|
|
|
$sql = "SELECT
|
|
p.*,
|
|
phone_verification_passenger.verified,
|
|
invitesToPassengers.isInstall,
|
|
invitesToPassengers.inviteCode,
|
|
invitesToPassengers.isGiftToken
|
|
FROM passengers p
|
|
LEFT JOIN phone_verification_passenger
|
|
ON phone_verification_passenger.phone_number = p.phone_key
|
|
LEFT JOIN invitesToPassengers
|
|
ON invitesToPassengers.inviterPassengerPhone = p.phone
|
|
WHERE p.email = :email OR (:email_bidx IS NOT NULL AND p.email_bidx = :email_bidx)
|
|
LIMIT 1";
|
|
|
|
$stmt = $con->prepare($sql);
|
|
$stmt->bindParam(':email', $encryptedEmail);
|
|
$stmt->bindParam(':email_bidx', $emailBidx);
|
|
$stmt->execute();
|
|
|
|
$data = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if ($data) {
|
|
// فحص الباسورد
|
|
if (password_verify($password, $data['password'])) {
|
|
// التحقق من أن الحساب معلم كحساب فحص في قاعدة البيانات أو البيئة
|
|
$isTestInDb = (isset($data['is_test']) && $data['is_test'] == 1) || (isset($data['isTest']) && $data['isTest'] == 1);
|
|
if (!$isTestInDb && !$isTester) {
|
|
jsonError("Access denied. Not a tester account.");
|
|
exit();
|
|
}
|
|
// فك تشفير البيانات للرد
|
|
if(isset($data['phone'])) $data['phone'] = $encryptionHelper->decryptData($data['phone']);
|
|
if(isset($data['email'])) $data['email'] = $encryptionHelper->decryptData($data['email']);
|
|
if(isset($data['gender'])) $data['gender'] = $encryptionHelper->decryptData($data['gender']);
|
|
if(isset($data['birthdate'])) $data['birthdate'] = $encryptionHelper->decryptData($data['birthdate']);
|
|
if(isset($data['site'])) $data['site'] = $encryptionHelper->decryptData($data['site']);
|
|
if(isset($data['first_name'])) $data['first_name'] = $encryptionHelper->decryptData($data['first_name']);
|
|
if(isset($data['last_name'])) $data['last_name'] = $encryptionHelper->decryptData($data['last_name']);
|
|
if(isset($data['sosPhone'])) $data['sosPhone'] = $encryptionHelper->decryptData($data['sosPhone']);
|
|
if(isset($data['education'])) $data['education'] = $encryptionHelper->decryptData($data['education']);
|
|
if(isset($data['employmentType'])) $data['employmentType'] = $encryptionHelper->decryptData($data['employmentType']);
|
|
if(isset($data['maritalStatus'])) $data['maritalStatus'] = $encryptionHelper->decryptData($data['maritalStatus']);
|
|
|
|
// Force verified = 1 for the test user so the Rider app doesn't reject the login
|
|
if (isset($data['is_test']) && $data['is_test'] == 1) {
|
|
$data['verified'] = 1;
|
|
}
|
|
|
|
// توليد الـ JWT بصلاحية (tester) لتميزهم عن المستخدمين الفعليين
|
|
$jwtService = new JwtService($redis);
|
|
$jwt = $jwtService->generateAccessToken($data['id'], 'tester', $audience, $fingerprint);
|
|
|
|
echo json_encode([
|
|
"status" => "success",
|
|
"jwt" => $jwt,
|
|
"data" => [$data] // مطابق لنسق التطبيق الذي يتوقع مصفوفة
|
|
], JSON_UNESCAPED_UNICODE);
|
|
|
|
} else {
|
|
echo json_encode([
|
|
"status" => "failure",
|
|
"message" => "Invalid credentials"
|
|
]);
|
|
}
|
|
} else {
|
|
echo json_encode([
|
|
"status" => "failure",
|
|
"message" => "Invalid credentials"
|
|
]);
|
|
}
|
|
|
|
} catch (Throwable $e) {
|
|
error_log("Error in loginUsingCredentialsWithoutGooglePassenger: " . $e->getMessage() . " in " . $e->getFile() . ":" . $e->getLine());
|
|
http_response_code(500);
|
|
echo json_encode([
|
|
"status" => "failure",
|
|
"message" => "Server error. Please try again."
|
|
]);
|
|
}
|
|
exit();
|