chore: استيراد أولي من سيرو (ecfe7568) — بلا أي تعديل

نسخة كاملة من مستودع سيرو عند ecfe7568 لتكون أساس تطبيق «انطلق». نُسخ المتعقَّب في git فقط (12,509 ملفاً / 302 م.ب) بـ git archive، لا `cp -r` — فاستُثنيت تلقائياً مخلفات البناء (build · node_modules · .dart_tool · .gradle · Pods ≈ 10.7 غ.ب) وكل ما يستثنيه .gitignore. هذا الكوميت **بلا أي تعديل عمداً** حتى يكون كل ما يليه فرقاً مقروءاً مقابل سيرو الأصلي. سيرو نفسه لم يُمسّ. ⚠️ لا يبني بعد: `.env` و`lib/env/env.g.dart` غير متعقَّبين في سيرو (وهذا صحيح — أسرار لكل مستأجر). كل تطبيق فلاتر هنا يحتاج .env خاصاً بانطلق ثم توليد env.g.dart عبر build_runner. لا تُنسخ أسرار سيرو. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-07-27 05:10:29 +03:00
commit 92dc6b3641
3654 changed files with 896478 additions and 0 deletions
@@ -0,0 +1,299 @@
+<?php
+// File: backend/auth/otp/providers.php
+// Encapsulates external OTP gateway API calls for Kazumi, Intaleq, and Nabeh.
+
+/**
+ * Send SMS OTP via Kazumi SMS Gateway (Egypt)
+ * 
+ * @param string $receiver Recipient phone number (e.g. +2010xxxxxxxx)
+ * @param string $otp 3-digit verification code
+ * @return bool True if OTP was sent successfully
+ */
+function sendKazumiSms(string $receiver, string $otp): bool {
+    $username = getenv('SMS_USERNAME');
+    $password = getenv('SMS_PASSWORD_EGYPT');
+    $sender   = getenv('SMS_SENDER');
+
+    if (!$username || !$password || !$sender) {
+        error_log("⚠️ [Kazumi OTP] Missing credentials in environment variables.");
+        return false;
+    }
+
+    $message = "Siro app code is " . $otp;
+    $apiUrl = 'https://sms.kazumi.me/api/sms/send-sms';
+    
+    $payload = [
+        'username' => $username,
+        'password' => $password,
+        'language' => 'e',
+        'sender'   => $sender,
+        'receiver' => $receiver,
+        'message'  => $message
+    ];
+
+    $response = curlCall("POST", $apiUrl, json_encode($payload), [
+        "Content-Type: application/json"
+    ]);
+
+    if ($response) {
+        $decoded = json_decode($response, true);
+        if (isset($decoded['message']) && $decoded['message'] === 'Success') {
+            return true;
+        }
+        error_log("❌ [Kazumi OTP] API returned failure response: " . $response);
+    }
+    return false;
+}
+
+/**
+ * Retrieve Nabeh JWT Bearer Token, caching it in Redis for 24 hours.
+ * 
+ * @return string|null The Bearer token, or null on failure.
+ */
+function getNabehBearerToken(): ?string {
+    global $redis;
+    
+    // 1. Try fetching from Redis first
+    if ($redis) {
+        try {
+            $cachedToken = $redis->get('nabeh_bearer_token');
+            if ($cachedToken) {
+                return $cachedToken;
+            }
+        } catch (Exception $e) {
+            $msg = "⚠️ [Nabeh Auth Redis] Error reading token: " . $e->getMessage();
+            error_log($msg);
+        }
+    }
+
+    // 2. Token not cached, authenticate via Nabeh Login API
+    $email = getenv('NABEH_EMAIL');
+    $password = getenv('NABEH_PASSWORD');
+    
+    if (!$email || !$password) {
+        $msg = "⚠️ [Nabeh Auth] Missing NABEH_EMAIL or NABEH_PASSWORD environment variables.";
+        $GLOBALS['last_otp_error'] = $msg;
+        error_log($msg);
+        return null;
+    }
+
+    $apiUrl = 'https://nabeh.intaleqapp.com/api/auth/login';
+    $payload = [
+        'email' => $email,
+        'password' => $password
+    ];
+
+    $response = curlCall("POST", $apiUrl, json_encode($payload), [
+        'Content-Type: application/json'
+    ]);
+    
+    $debugLog = "[Nabeh Auth Debug] Request: $apiUrl | Response: $response";
+    error_log($debugLog);
+
+    if ($response) {
+        $decoded = json_decode($response, true);
+        $token = $decoded['token'] ?? $decoded['message']['token'] ?? $decoded['jwt'] ?? $decoded['access_token'] ?? null;
+        if ($token) {
+            
+            // 3. Cache token in Redis for 24h
+            if ($redis) {
+                try {
+                    $redis->setex('nabeh_bearer_token', 86400, $token);
+                    error_log("[Nabeh Auth Debug] Token cached in Redis successfully.");
+                } catch (Exception $e) {
+                    $msg = "⚠️ [Nabeh Auth Redis Cache Save] Error saving token: " . $e->getMessage();
+                    error_log($msg);
+                }
+            }
+            return $token;
+        }
+        $msg = "❌ [Nabeh Auth Login Failed] Response: " . $response;
+        $GLOBALS['last_otp_error'] = $msg;
+        error_log($msg);
+    } else {
+        $msg = "❌ [Nabeh Auth Login Failed] Empty response from login API.";
+        $GLOBALS['last_otp_error'] = $msg;
+        error_log($msg);
+    }
+    return null;
+}
+
+/**
+ * Send OTP via Nabeh JWT Auth Gateway (WhatsApp, Voice, etc.)
+ * 
+ * @param string $receiver Recipient phone number
+ * @param string $otp 3-digit verification code
+ * @param string $method text | voice | image | whatsapp
+ * @param string $user_type passenger | driver | admin | service
+ * @return bool True if OTP was sent successfully
+ */
+function sendNabehOtp(string $receiver, string $otp, string $method = '', string $user_type = 'passenger'): bool {
+    $bearerToken = getNabehBearerToken();
+    if (!$bearerToken) {
+        if (empty($GLOBALS['last_otp_error'])) {
+            $GLOBALS['last_otp_error'] = "⚠️ [Nabeh OTP] Failed to obtain dynamic JWT Bearer token.";
+        }
+        return false;
+    }
+
+    // Strip symbols for Nabeh endpoint
+    $phoneRaw = preg_replace('/\D+/', '', $receiver);
+
+    // Map method/type (Image OTP card is default for Nabeh)
+    $type = ($method === 'text') ? 'text' : (($method === 'voice') ? 'voice' : 'image');
+
+    $appName = 'سيرو رايدر';
+    if ($user_type === 'driver') {
+        $appName = 'سيرو درايفر';
+    } elseif ($user_type === 'admin') {
+        $appName = 'سيرو الأدمن';
+    } elseif ($user_type === 'service') {
+        $appName = 'سيرو للخدمات';
+    }
+
+    // First attempt with the chosen type
+    $result = _nabehOtpAttempt($phoneRaw, $type, $otp, $appName, $bearerToken);
+    if ($result) {
+        return true;
+    }
+
+    // Fallback: if image failed, retry with text
+    if ($type === 'image') {
+        error_log("ℹ️ [Nabeh OTP Fallback] Image failed, retrying with text type...");
+        $result = _nabehOtpAttempt($phoneRaw, 'text', $otp, $appName, $bearerToken);
+        if ($result) {
+            return true;
+        }
+    }
+
+    return false;
+}
+
+/**
+ * Internal helper: single OTP send attempt to Nabeh
+ */
+function _nabehOtpAttempt(string $phone, string $type, string $otp, string $appName, string $bearerToken): bool {
+    $apiUrl = 'https://nabeh.intaleqapp.com/api/otp/send';
+    $payload = [
+        'phone' => $phone,
+        'type' => $type,
+        'code' => $otp,
+        'message' => "رمز التحقق الخاص بك لتطبيق {$appName} هو: *{code}* \n الرجاء عدم مشاركته مع أي شخص."
+    ];
+
+    $response = curlCall("POST", $apiUrl, json_encode($payload), [
+        'Content-Type: application/json',
+        "Authorization: Bearer $bearerToken"
+    ]);
+
+    if ($response) {
+        $decoded = json_decode($response, true);
+        error_log("ℹ️ [Nabeh OTP Response type=$type] " . $response);
+        if ($decoded) {
+            $statusStr = strtolower((string)($decoded['status'] ?? ''));
+            $msgStr = strtolower((string)($decoded['message'] ?? ''));
+            $errStr = strtolower((string)($decoded['error'] ?? ''));
+            if (
+                !empty($decoded['success']) ||
+                in_array($statusStr, ['success', 'ok', 'true', '200', 'sent', 'queued', '1'], true) ||
+                ($decoded['status'] ?? false) === true ||
+                ($decoded['code'] ?? 0) === 200 ||
+                !empty($decoded['message_id']) ||
+                !empty($decoded['id']) ||
+                !empty($decoded['token']) ||
+                strpos($msgStr, 'success') !== false ||
+                strpos($msgStr, 'sent') !== false ||
+                strpos($msgStr, 'تم') !== false ||
+                strpos($errStr, 'via gateway') !== false
+            ) {
+                return true;
+            }
+        }
+        $msg = "❌ [Nabeh OTP type=$type] Response: " . $response;
+        $GLOBALS['last_otp_error'] = $msg;
+        error_log($msg);
+    } else {
+        $msg = "❌ [Nabeh OTP type=$type] Empty cURL response.";
+        $GLOBALS['last_otp_error'] = $msg;
+        error_log($msg);
+    }
+    return false;
+}
+
+/**
+ * Send OTP via Intaleq Static OTP Gateway (using body app_key parameter)
+ * 
+ * @param string $receiver Recipient phone number
+ * @param string $otp 3-digit verification code
+ * @param string $method whatsapp | sms | voice | flash_call
+ * @return bool True if OTP was sent successfully
+ */
+function sendIntaleqOtp(string $receiver, string &$otp, string $method = 'whatsapp'): bool {
+    $appKey = getenv('NABEH_OTP_APP_KEY');
+    
+    if (!$appKey) {
+        error_log("⚠️ [Intaleq OTP] Missing NABEH_OTP_APP_KEY in environment.");
+        return false;
+    }
+
+    // Normalize receiver to start with +
+    $phoneWithPlus = (strpos($receiver, '+') === 0) ? $receiver : '+' . $receiver;
+
+    $apiUrl = 'https://otp.intaleqapp.com/api/request-otp.php';
+    $payload = [
+        'phone' => $phoneWithPlus,
+        'app_key' => $appKey
+    ];
+
+    $response = curlCall("POST", $apiUrl, json_encode($payload), [
+        'Content-Type: application/json'
+    ]);
+
+    if ($response) {
+        $decoded = json_decode($response, true);
+        if ($decoded && (!empty($decoded['success']) || ($decoded['status'] ?? '') === 'success')) {
+            if (isset($decoded['otp'])) {
+                $otp = (string)$decoded['otp'];
+            }
+            return true;
+        }
+        $msg = "❌ [Intaleq OTP] API returned failure response: " . $response;
+        error_log($msg);
+    } else {
+        error_log("❌ [Intaleq OTP] Empty response or cURL failed.");
+    }
+    return false;
+}
+
+/**
+ * Generic cURL execution helper
+ */
+function curlCall(string $method, string $url, string $data, array $headers): ?string {
+    $ch = curl_init($url);
+    curl_setopt_array($ch, [
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_CUSTOMREQUEST => $method,
+        CURLOPT_POSTFIELDS => $data,
+        CURLOPT_HTTPHEADER => $headers,
+        CURLOPT_TIMEOUT => 35,
+        CURLOPT_CONNECTTIMEOUT => 10
+    ]);
+
+    $response = curl_exec($ch);
+    $error = curl_error($ch);
+    $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    curl_close($ch);
+
+    if ($error) {
+        $msg = "⚠️ [OTP cURL] Error calling $url: $error";
+        error_log($msg);
+        return null;
+    }
+
+    if ($httpCode !== 200) {
+        $msg = "⚠️ [OTP cURL] Non-200 HTTP code $httpCode from $url. Response: $response";
+        error_log($msg);
+    }
+
+    return $response;
+}