Hamza-AyedandClaude Opus 5
8d7e3118b5
Completes the set of queries that matched a freshly encrypted value against a stored one, which only works while encryption is deterministic. Each keeps its original comparison and adds an index comparison in the same WHERE, so nothing changes today. - passenger sign-in by email, service-staff sign-in, Firebase token lookup - driver lookup by phone and by national number - admin ride lookup and ride monitor (both tables) - nabeh: driver status, user resolution, ride history, complaint submission transit_org_admins lives in the transit database and has no index column, so login there falls back to decrypting the small set of active admins and comparing normalised numbers. Schema: adds users.email_bidx/phone_bidx and driver.national_bidx with their indexes. Verified that every :*_bidx placeholder introduced is actually bound — an unbound one is a fatal error at request time, not a silent miss. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
95 lines
3.1 KiB
PHP
95 lines
3.1 KiB
PHP
<?php
|
|
/**
|
|
* Nabeh Integration — Driver Status Check
|
|
*
|
|
* Called by Nabeh AI platform to check driver registration/activation status.
|
|
*/
|
|
|
|
require_once __DIR__ . '/../core/bootstrap.php';
|
|
|
|
header('Access-Control-Allow-Origin: *');
|
|
header('Access-Control-Allow-Methods: GET, OPTIONS');
|
|
header('Access-Control-Allow-Headers: Content-Type, X-API-Key');
|
|
|
|
$apiKey = $_SERVER['HTTP_X_API_KEY'] ?? '';
|
|
$expectedKey = getenv('NABEH_API_KEY') ?: '';
|
|
|
|
if (empty($apiKey) || $apiKey !== $expectedKey) {
|
|
http_response_code(401);
|
|
echo json_encode(['status' => 'failure', 'message' => 'Unauthorized']);
|
|
exit;
|
|
}
|
|
|
|
$phone = $_GET['phone'] ?? '';
|
|
|
|
if (empty($phone)) {
|
|
http_response_code(400);
|
|
echo json_encode(['status' => 'failure', 'message' => 'Phone parameter required']);
|
|
exit;
|
|
}
|
|
|
|
try {
|
|
$db = Database::get('main');
|
|
global $encryptionHelper;
|
|
|
|
$encryptedPhone = $encryptionHelper->encryptData($phone);
|
|
global $blindIndex;
|
|
$phoneBidx = $blindIndex ? $blindIndex->index('driver.phone', $phone) : null;
|
|
|
|
$stmt = $db->prepare("
|
|
SELECT d.id, d.phone, d.first_name, d.last_name, d.status, d.created_at,
|
|
cr.id as car_id, cr.make, cr.model, cr.year, cr.car_plate, cr.status as car_status
|
|
FROM driver d
|
|
LEFT JOIN CarRegistration cr ON cr.driverID = d.id
|
|
WHERE (d.phone = :phone OR (:phone_bidx IS NOT NULL AND d.phone_bidx = :phone_bidx))
|
|
LIMIT 1
|
|
");
|
|
$stmt->execute([
|
|
':phone' => $encryptedPhone,
|
|
':phone_bidx' => $phoneBidx,
|
|
]);
|
|
$result = $stmt->fetch(PDO::FETCH_ASSOC);
|
|
|
|
if (!$result) {
|
|
echo json_encode([
|
|
'status' => 'success',
|
|
'data' => null,
|
|
'message' => 'Driver not found'
|
|
]);
|
|
exit;
|
|
}
|
|
|
|
$decryptedPhone = $encryptionHelper->decryptData($result['phone']);
|
|
$decryptedFirstName = $encryptionHelper->decryptData($result['first_name']);
|
|
$decryptedLastName = $encryptionHelper->decryptData($result['last_name']);
|
|
|
|
$docStmt = $db->prepare("SELECT doc_type, link FROM driver_documents WHERE driverID = :driverID");
|
|
$docStmt->execute([':driverID' => $result['id']]);
|
|
$documents = $docStmt->fetchAll(PDO::FETCH_ASSOC);
|
|
|
|
echo json_encode([
|
|
'status' => 'success',
|
|
'data' => [
|
|
'driver_id' => $result['id'],
|
|
'phone' => $decryptedPhone,
|
|
'name' => trim($decryptedFirstName . ' ' . $decryptedLastName),
|
|
'status' => $result['status'],
|
|
'registered_at' => $result['created_at'],
|
|
'car' => [
|
|
'id' => $result['car_id'],
|
|
'make' => $result['make'],
|
|
'model' => $result['model'],
|
|
'year' => $result['year'],
|
|
'plate' => $result['car_plate'],
|
|
'status' => $result['car_status'],
|
|
],
|
|
'documents' => $documents,
|
|
]
|
|
], JSON_UNESCAPED_UNICODE);
|
|
|
|
} catch (\Exception $e) {
|
|
error_log("[Nabeh Status Error] " . $e->getMessage());
|
|
http_response_code(500);
|
|
echo json_encode(['status' => 'failure', 'message' => 'Internal server error']);
|
|
}
|