Files
musadaq-saas/app/Modules/ApiKeys/ApiKeyController.php

62 lines
2.1 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Modules\ApiKeys;
use App\Core\{Request, Response, Database};
use Ramsey\Uuid\Uuid;
final class ApiKeyController
{
public function index(Request $request): void
{
$tenantId = $request->tenantId;
$db = Database::getInstance();
$stmt = $db->prepare("SELECT id, name, public_key, created_at, last_used_at, is_active FROM api_keys WHERE tenant_id = ? ORDER BY created_at DESC");
$stmt->execute([$tenantId]);
Response::json([
'success' => true,
'data' => $stmt->fetchAll()
]);
}
public function create(Request $request): void
{
$tenantId = $request->tenantId;
$userId = $request->user->user_id ?? $request->user->id;
$name = $request->input('name') ?: 'Default Key';
$id = Uuid::uuid4()->toString();
$publicKey = bin2hex(random_bytes(16));
$secret = bin2hex(random_bytes(32));
$secretHash = password_hash($secret, PASSWORD_BCRYPT);
$db = Database::getInstance();
$stmt = $db->prepare("INSERT INTO api_keys (id, tenant_id, user_id, name, public_key, secret_hash, is_active) VALUES (?, ?, ?, ?, ?, ?, 1)");
$stmt->execute([$id, $tenantId, $userId, $name, $publicKey, $secretHash]);
Response::json([
'success' => true,
'message' => 'تم إنشاء مفتاح API بنجاح. يرجى حفظ السر لأنه لن يظهر مرة أخرى.',
'data' => [
'id' => $id,
'public_key' => $publicKey,
'secret' => $secret
]
], 201);
}
public function revoke(Request $request, string $id): void
{
$tenantId = $request->tenantId;
$db = Database::getInstance();
$stmt = $db->prepare("UPDATE api_keys SET is_active = 0 WHERE id = ? AND tenant_id = ?");
$stmt->execute([$id, $tenantId]);
Response::json([
'success' => true,
'message' => 'تم إلغاء مفتاح API بنجاح'
]);
}
}