Adds membership query endpoint

snapporder/api/query.php

@@ -1,4 +1,11 @@
 <?php
+set_include_path("../../includes/");
+require_once("../../inside/credentials.php");
+require_once("../../inside/functions.php");
+require_once("../../includes/DB.php");
+
+require_once("../lib/CryptoHelper.php");
+require_once("../config.php");
 /* 
  * Lookup a members phone number and return a member-like object.
  *
@@ -9,18 +16,94 @@
  * Response:
  *
  * {
- *   "phone":12345678,
- *   "memberStatus":1, // 0 - ikke medlem, 1 - medlem, 2 - aktiv
- *   "endDate": "2015-04-23",
- *   "membershipNumber": "dsadsa2333",
+ *   "phone":" 42345678",
+ *   "membership_status": 1, // 0 - ikke medlem, 1 - medlem, 2 - aktiv
+ *   "expires": "2015-04-23",
+ *   "cardno": "12345",
  *   "firstName": "Jon",
  *   "lastName": "Hansen",
  *   "email": "jon@uio.no"
  * }
  *
- * TODO:
- * - Decode http body
- * - validate and sanitize query param
- * - lookup up phone number
- * - return result
  */
+$crypt = new CryptoHelper(SNAP_IV, SNAP_KEY);
+
+/* Checks */
+if(!isset($_GET['phone'])) {
+    http_response_code(400);
+    echo json_encode(array('error' => 'Missing param phone'));
+    die();
+}
+$phone = mysql_real_escape_string($_GET['phone']);
+if(!is_numeric($phone) || strlen($phone) !== 8 ) {
+    http_response_code(400);
+    echo json_encode(array('error' => 'Not a phone number'));
+    die();
+}
+
+/* Connect to database */
+$options = array( 'debug' => 2, 'portability' => DB_PORTABILITY_ALL );
+$conn = DB::connect(getDSN(), $options);
+if(DB :: isError($conn)) {
+    echo $conn->toString();
+    http_response_code(500);
+    echo json_encode(array('error' => 'Could not connect to DB'));
+    die();
+}
+
+/* Search in phone number table for phone number */
+$conn->setFetchMode(DB_FETCHMODE_ASSOC);
+$sql = "SELECT user_id FROM din_userphonenumber WHERE number='$phone'";
+$res = $conn->query($sql);
+if( DB::isError($res) ) {
+    http_response_code(500);
+    echo json_encode( array('error' => 'db_error', 'error_message' => $res->toString() ) );
+    die();
+}
+// empty?
+if( $res->numRows() == 0) {
+    echo json_encode( array('result' => 'No matching users'));
+    die();
+}
+$res->fetchInto($row);
+$user_id = $row['user_id'];
+
+/* Get user object with group ids and membership status */
+$cols = array('id', 'firstname', 'lastname', 'email', 'expires', 'cardno');
+$sql = "SELECT ".implode($cols, ",").",GROUP_CONCAT(group_id) AS group_ids,expires > NOW() OR expires IS NULL AS is_member FROM din_user AS u, din_usergrouprelationship AS ug WHERE u.id=$user_id AND u.id=ug.user_id GROUP BY user_id";
+$res = $conn->query($sql);
+if( DB::isError($res) ) {
+    echo json_encode( array('error' => 'db_error', 'error_message' => $res->toString() ) );
+    die();
+}
+$res->fetchInto($user);
+
+/* Membership status according to spec.
+ * Status codes:
+ * 0 - Registered
+ * 1 - Member
+ * 2 - Active member
+ */
+$groups = explode(",", $user['group_ids']);
+$user['membership_status'] = 0;
+
+if($user['is_member'] !== "0") {
+    // Group id mappings 1:dns-alle, 2: dns-aktiv, 3:administrator, 4+:orgunits/special groups
+    if(in_array("2", $groups)) {
+        $user['membership_status'] = 2;
+    } else {
+        $user['membership_status'] = 1;
+    }
+}
+/* Add back phone number from query */
+$user['phone'] = $phone;
+
+/* Clean up user object */
+unset($user['is_member']);
+unset($user['group_ids']);
+
+/* Return encrypted user object */
+echo json_encode($user);
+//echo $crypt->encrypt(json_encode($user));
+
+?>

snapporder/api/register.php

@@ -30,4 +30,8 @@
  * - register user in temp user db
  * - return result
  */
+/* Decrypt body */
+$crypt = new CryptoHelper(SNAP_IV, SNAP_KEY);
+var_dump($crypt->decrypt($crypt->encrypt("lol")));
+
 ?>