Rename and work on membership renewal WIP

api/membership.php

@@ -0,0 +1,96 @@
+<?php
+
+/* Pull in Inside */
+set_include_path("../includes/".PATH_SEPARATOR."../inside/".PATH_SEPARATOR."../snapporder");
+require_once("functions.php");
+require_once("User.php");
+
+/* Pull in some nifty stuff from snapporder integration */
+require_once("api_functions.php");
+require_once("lib/functions.php");
+require_once("config.php");
+
+/* Validate request */
+$body = file_get_contents('php://input');
+if(strlen($body) === 0) {
+    return_json_response(array('error' => 'Invalid request'), 400);
+}
+
+/* Decode body */
+$data = json_decode($body, true);
+if($data === NULL) {
+    return_json_response(array('error' => 'Can\'t decode body'), 400);
+}
+
+$required_keys = array('apikey', 'user_id');
+$valid_keys = $required_keys;
+$valid_keys = array_merge($valid_keys, array('purchased', 'source'));
+
+$valid_sources = array('card');
+
+/* Validate supplied data */
+foreach($required_keys as $key) {
+    if(!array_key_exists($key, $data)) {
+        return_json_response(array('error' => 'missing required field \''.$key.'\''), 400);
+    }
+}
+foreach($data as $key => $value) {
+    if(!in_array($key, $valid_keys)) {
+        return_json_response(array('error' => 'unknown field \''.$key.'\''), 400);
+    }
+}
+
+/* Valid API KEY (defined in credentials.php) ? */
+if( $data['apikey'] !== USER_API_KEY_KASSA ) {
+    return_json_response(array('error' => "Invalid apikey: '".$data['apikey']."'."), 400);
+}
+
+$conn = get_db_connection(DB_FETCHMODE_ASSOC);
+
+/* Existing user? */
+$user = get_user($user_id);
+/* Don't allow renewal if valid membership exists. */
+if( $user['membership_status'] !== 0 ) {
+    if($user['expires'] === '') {
+        // Life long
+        return_json_response(array('error' => 'Cannot renew, user with id '.$user['id'].' has a life long membership.'), 409);
+    }
+    return_json_response(array('error' => 'Cannot renew, user with phone '.$user['id'].' has a valid membership until: '.$user['expires']), 409);
+}
+// TODO: existing membership or new membership?
+
+/* Validate optional purchase_date */
+$purchased = NULL;
+if( isset($data['purchased']) ) {
+    $purchased = clean_date($data['purchased']);
+    if($purchased === false) {
+        return_json_response(array('error' => 'Could not parse date from field purchased: '.$data['purchased']), 400);
+    }
+}
+
+/* Validate optional source */
+if( isset($data['source']) && !in_array($data['source'], $valid_sources) ) {
+    return_json_response(array('error' => 'Invalid value in field source: '.$data['source']), 400);
+}
+
+/* Add or renew membership */
+try {
+    add_or_renew_membership($user_id, $purchased);
+} catch(InsideDatabaseException $e) {
+    error_log($e->getMessage());
+    return_json_response(array('error' => 'db_error', 'error_message' => $e->getMessage()), 500);
+}
+
+/* Get and format user */
+$user = NULL;
+try {
+    $user = get_user($user_id);
+} catch(InsideDatabaseException $e) {
+    error_log($e->getMessage());
+    return_json_response(array('error' => 'db_error', 'error_message' => $e->getMessage()), 500);
+}
+
+// TODO: send new membership or renewal email
+
+/* Return encrypted user object */
+return_json_response($user);