Files
musadaq-saas/app/Modules/ApiKeys/ApiKeyController.php

64 lines
2.1 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Modules\ApiKeys;
use App\Core\{Request, Response, Database};
final class ApiKeyController
{
public function index(Request $request): void
{
$tenantId = $request->tenantId;
$db = Database::getInstance();
$stmt = $db->prepare("SELECT id, public_key, name, is_active, created_at FROM api_keys WHERE tenant_id = ? AND is_active = 1");
$stmt->execute([$tenantId]);
$keys = $stmt->fetchAll();
Response::json(['success' => true, 'data' => $keys]);
}
public function create(Request $request): void
{
$tenantId = $request->tenantId;
$data = $request->getBody();
$name = $data['name'] ?? 'Default Key';
$publicKey = bin2hex(random_bytes(16)); // 32 chars
$secret = bin2hex(random_bytes(32)); // 64 chars
$db = Database::getInstance();
$stmt = $db->prepare("INSERT INTO api_keys (id, tenant_id, name, public_key, secret_hash, is_active, created_at) VALUES (?, ?, ?, ?, ?, 1, NOW())");
$id = \Ramsey\Uuid\Uuid::uuid4()->toString();
$stmt->execute([
$id,
$tenantId,
$name,
$publicKey,
password_hash($secret, PASSWORD_BCRYPT)
]);
Response::json([
'success' => true,
'message' => 'تم إنشاء مفتاح API بنجاح. يرجى حفظ السر (Secret) الآن لأنه لن يظهر مرة أخرى.',
'data' => [
'id' => $id,
'public_key' => $publicKey,
'secret' => $secret
]
], 201);
}
public function revoke(Request $request, string $id): void
{
$tenantId = $request->tenantId;
$db = Database::getInstance();
$stmt = $db->prepare("UPDATE api_keys SET is_active = 0 WHERE id = ? AND tenant_id = ?");
$stmt->execute([$id, $tenantId]);
Response::json(['success' => true, 'message' => 'تم إيقاف مفتاح API بنجاح']);
}
}