Slim API deployment - composer install + full CRUD endpoints

2026-05-20 14:36:05 +02:00
parent 48bf9c7088
commit 8ab4e532fd
1727 changed files with 7746 additions and 7 deletions
--- a/api/src/Controllers/AuthController.php
+++ b/api/src/Controllers/AuthController.php
@@ -0,0 +1,80 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controllers;
+
+use App\Models\User;
+use Firebase\JWT\JWT;
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+
+final class AuthController
+{
+    public function login(ServerRequestInterface $request, ResponseInterface $response): ResponseInterface
+    {
+        $body = json_decode($request->getBody()->getContents(), true);
+        $email = $body['email'] ?? '';
+        $password = $body['password'] ?? '';
+
+        if (empty($email) || empty($password)) {
+            return $this->json($response, ['message' => 'Email and password required'], 400);
+        }
+
+        $user = User::where('email', $email)->first();
+
+        if (!$user || !password_verify($password, $user->password_hash)) {
+            return $this->json($response, ['message' => 'Invalid credentials'], 401);
+        }
+
+        if (!$user->is_active) {
+            return $this->json($response, ['message' => 'Account disabled'], 403);
+        }
+
+        // Generate JWT
+        $now = time();
+        $payload = [
+            'iss' => 'api.fahrschultermin.de',
+            'sub' => $user->id,
+            'tenant_id' => $user->tenant_id,
+            'role' => $user->role,
+            'iat' => $now,
+            'exp' => $now + (8 * 60 * 60), // 8 hours
+        ];
+
+        $jwt = JWT::encode($payload, $_ENV['JWT_SECRET'] ?? 'this-is-a-32-character-secret-key-for-testing', 'HS256');
+
+        $userData = $user->toArray();
+        unset($userData['password_hash']);
+
+        return $this->json($response, [
+            'token' => $jwt,
+            'user' => $userData,
+        ]);
+    }
+
+    public function me(ServerRequestInterface $request, ResponseInterface $response): ResponseInterface
+    {
+        $user = $request->getAttribute('user');
+
+        if (!$user) {
+            return $this->json($response, ['message' => 'Unauthenticated'], 401);
+        }
+
+        return $this->json($response, ['user' => $user]);
+    }
+
+    public function logout(ResponseInterface $response): ResponseInterface
+    {
+        // JWT is stateless, logout is client-side (discard token)
+        return $this->json($response, ['message' => 'Logged out']);
+    }
+
+    private function json(ResponseInterface $response, array $data, int $status = 200): ResponseInterface
+    {
+        $response->getBody()->write(json_encode($data));
+        return $response
+            ->withStatus($status)
+            ->withHeader('Content-Type', 'application/json');
+    }
+}