Files
intaleq_v3_pure_php/serviceapp/login.php
Hamza-Ayed aea14f420e admin 1
2026-04-30 15:59:58 +03:00

56 lines
2.0 KiB
PHP
Executable File

<?php
require_once __DIR__ . '/../core/bootstrap.php';
$fingerprint = filterRequest('fingerprint');
$password = filterRequest('password');
$audience = filterRequest('aud') ?? 'service';
if (empty($fingerprint) || empty($password)) {
jsonError("Fingerprint and password are required.");
exit();
}
try {
$con = Database::get('main');
// البحث بالبصمة للموظف
$sql = "SELECT * FROM `users` WHERE `fingerprint` = :fp AND `user_type` = 'service' LIMIT 1";
$stmt = $con->prepare($sql);
$stmt->execute([':fp' => $fingerprint]);
$user = $stmt->fetch(PDO::FETCH_ASSOC);
if ($user) {
// التحقق من كلمة المرور
if (password_verify($password, $user['password'])) {
// فك تشفير البيانات للعرض في التطبيق
$user['first_name'] = $encryptionHelper->decryptData($user['first_name']) ?: $user['first_name'];
$user['last_name'] = $encryptionHelper->decryptData($user['last_name']) ?: $user['last_name'];
$user['email'] = $encryptionHelper->decryptData($user['email']) ?: $user['email'];
$user['phone'] = $encryptionHelper->decryptData($user['phone']) ?: $user['phone'];
unset($user['password']);
// توليد التوكن
$jwtService = new JwtService($redis);
$role = 'service';
$jwt = $jwtService->generateAccessToken($user['id'], $role, $audience);
printSuccess([
"message" => "Login successful",
"data" => $user,
"jwt" => $jwt,
"expires_in" => 3600
]);
} else {
jsonError("Incorrect password");
}
} else {
jsonError("الجهاز غير مسجل لموظف خدمة.");
}
} catch (Exception $e) {
error_log("[ServiceApp Login Error] " . $e->getMessage());
jsonError("Server error: " . $e->getMessage());
}
exit();