This commit is contained in:
Torsten 2024-12-14 09:51:39 +01:00
parent ba3de1ae99
commit 4d205a337b
8 changed files with 96 additions and 102 deletions

View file

@ -60,7 +60,7 @@ Access mysql from inside container
mysql -h 127.0.0.1 -u root
CREATE DATABASE TEST_DB;
CREATE DATABASE godotweb;
```

View file

@ -11,6 +11,28 @@ ln -s myprojectapp/public htdocs
```
Setup db settings in .env:
```txt
CI_ENVIRONMENT = development
#--------------------------------------------------------------------
# APP
#--------------------------------------------------------------------
app.baseURL = 'http://godotweb.local'
#--------------------------------------------------------------------
# DATABASE
#--------------------------------------------------------------------
database.default.hostname = godotweb.local
database.default.database = godotweb
database.default.username = root
database.default.password =
database.default.DBDriver = MySQLi
database.default.DBPrefix =
database.default.port = 3306
```
Add shield:
```bash
composer require codeigniter4/shield

View file

@ -12,7 +12,12 @@ $routes->get("logout", "AuthController::logout", ["filter" => "apiauth"]);
Api/AuthController.php
```php
use CodeIgniter\Restful\ResourceController;
<?php
namespace App\Controllers\Api;
use CodeIgniter\HTTP\ResponseInterface;
use CodeIgniter\RESTful\ResourceController;
use CodeIgniter\Shield\Models\UserModel;
use CodeIgniter\Shield\Entities\User;
@ -22,46 +27,47 @@ class AuthController extends ResourceController
public function register()
{
$rules = [
"username" => "required|is_unique[users.username]",
"email" => "required|valid_email|is_unique[auth_identities.secret]", // gets written to secret field in user table
"password" => "required" // gets written to secret 2 field in user table
"username" => "required|is_unique[users.username]",
"email" => "required|valid_email|is_unique[auth_identities.secret]", // gets written to secret field in user table
"password" => "required" // gets written to secret 2 field in user table
];
if (!$this->validate($rules)) {
if (!$this->validate($rules))
{
return $this->respondCreated([
"status" => false,
"message" => $this->validator->getErrors(),
"message" => $this->validator->getErrors(),
"data" => []
]
);
]);
}
$um = new UserModel(); // coming from Shield
$userEntity = new User([
"username" => $this->request->getVar("username"),
"email" => $this->request->getVar("email"),
"password" => $this->request->getVar("password")
]);
$um->save($userEntity);
return $this->respondCreated( [
"status" => true,
"message" => "User saved successfully",
"data" => []
]);
}
//////////////////////////////////////
// Post
public function login()
{
if(auth()->loggedIn()){
{
if(auth()->loggedIn()) {
auth()->logout();
}
$rules = [
"email" => "required|valid_email",
"password" => "required"
"email" => "required|valid_email",
"password" => "required"
];
if (!$this->validate($rules)) {
@ -69,45 +75,70 @@ class AuthController extends ResourceController
"status" => false,
"message" => $this->validator->getErrors(),
"data" => []
]);
]);
}
// success
$credentials = [
"email" => $this->request->getVar("email"),
"password" => $this->request->getVar("password")
"email" => $this->request->getVar("email"),
"password" => $this->request->getVar("password")
];
$loginAttempt = auth()->attempt($credentials);
if (!$loginAttempt->isOK()) {
return $this->respondCreated([
"status" => false,
"message" => "Invalid login details",
"data" => []
"status" => false,
"message" => "Invalid login details",
"data" => []
]);
}
// We have a valid data set
$um = new UserModel();
$userData = $um->findById(auth()->id());
$token = $userData->generateAccessToken("thisismysecretkey");
$auth_token = $token->raw_token; // Only available after generation
return $this->respondCreated( [
"status" => true,
"message" => "User logged in successfully",
"data" => [
"status" => true,
"message" => "User logged in successfully",
"data" => [
"token" => $auth_token
] );
]
]);
}
////////////////////////
public function logout() {
public function logout()
{
auth()->logout();
auth()->user()->revokeAllAccessTokens();
return $this->respondCreated([
"status" => true,
"message" => "User logged out successfully",
"status" => true,
"message" => "User logged out successfully",
"data" => []
]);
}
//Get
public function profile()
{
$userId = auth()->id();
return $this->respondCreated([
"status" => true,
"message" => "Profile api called",
"data" => []
]);
}
public function accessDenied()
{
return $this->respondCreated([
"status" => false,
"message" => "Invalid access",
"data" => []
]);
}

View file

@ -19,53 +19,4 @@ $routes->group("api", ["namespace" => "App\Controller\Api"], function($routes) {
//$routes->get("list-projects", "ProjectController::listProjects");
//$routes->delete("delete-project/(:num)", "ProjectController::deleteProject/$1");
});
```
$routes->get("logout", "AuthController::logout", ["filter" => "apiauth"]);
```php
use CodeIgniter\Restful\ResourceController;
use CodeIgniter\Shield\Models\UserModel;
use CodeIgniter\Shield\Entities\User;
class AuthController extends ResourceController
{
//Post
public function register()
{
$rules = [
"username" => "required|is_unique[users.username]",
"email" => "required|valid_email|is_unique[auth_identities.secret]", // gets written to secret field in user table
"password" => "required" // gets written to secret 2 field in user table
];
if (!$this->validate($rules)) {
return $this->respondCreated([
"status" => false,
"message" => $this->validator->getErrors(),
"data" => []
]
);
$um = new UserModel(); // coming from Shield
$userEntity = new User([
"username" => $this->request->getVar("username"),
"email" => $this->request->getVar("email"),
"password" => $this->request->getVar("password")
]);
$um->save($userEntity);
return $this->respondCreated( [
"status" => true,
"message" => "User saved successfully",
"data" => []
]);
}
}
```

View file

@ -17,7 +17,6 @@ public function before(RequestInterface $request, $arguments = null)
}
```
Routes.php
```php
// API ROUTES
@ -28,20 +27,6 @@ $routes->group("api",["namespace]=> "App\Controllers\Api"], function($routes) {
...
```
Define accessDenied method in app/Controllers/Api/AuthController.php
```php
...
public function accessDenied()
{
return $this->respondCreated([
"status" => false,
"message" => "Invalid access",
"data" => []
]);
}
...
```
Add filter to app/Config/Filters.php
```php
use App\Filters\AuthFilter;

View file

@ -0,0 +1,5 @@
![[Pasted image 20241214094809.png]]
![[Pasted image 20241214094906.png]]
600933326ac42a7f1669bfcaceb4bf1f973c8f64f54dccff9d6c424a9c2c0e5d

Binary file not shown.

After

Width:  |  Height:  |  Size: 74 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 85 KiB