1#@!#!123s

��JFIF�� 1#@!#!123s
: / home / earnlouq / www / public / functions /
Filename : utils.php
back
<?php
// public/functions/utils.php
require_once __DIR__ . '/../../config/gl_config.php';
require_once __DIR__ . '/../../vendor/autoload.php'; 
use Firebase\JWT\JWT;
use Firebase\JWT\Key;

function encrypt_data($data) {
    global $config;
    if (empty($config['encryption']['key']) || empty($config['encryption']['iv'])) {
        //error_log('Encryption configuration missing');
        return false;
    }
    return openssl_encrypt($data, 'AES-256-CBC', $config['encryption']['key'], 0, $config['encryption']['iv']);
}

function generate_jwt($user_id) {
    global $config, $con;
    $payload = [
        'iss' => $config['app']['url'] ?? 'http://localhost',
        'aud' => $config['app']['url'] ?? 'http://localhost',
        'iat' => time(),
        'data' => ['user_id' => $user_id]
    ];
    $secret_key = $config['encryption']['key'];
    $token = JWT::encode($payload, $secret_key, 'HS256');
    $token_hash = hash('sha256', $token);
    $sql = "INSERT INTO tokens (user_id, token_hash) VALUES (?, ?)";
    $stmt = db_prepare_execute($sql, [$user_id, $token_hash], 'is');
    if (!$stmt || !mysqli_stmt_execute($stmt)) {
        //error_log("Failed to store token hash: " . mysqli_error($con));
    }
    mysqli_stmt_close($stmt); // Close the statement
    return $token;
}

function verify_jwt($token) {
    global $config, $con;
    $secret_key = $config['encryption']['key'];
    $token_hash = hash('sha256', $token);
    $sql = "SELECT revoked_at FROM tokens WHERE token_hash = ? AND revoked_at IS NULL LIMIT 1";
    $stmt = db_prepare_execute($sql, [$token_hash], 's');
    if (!$stmt) {
        //error_log("verify_jwt: Failed to prepare statement: " . mysqli_error($con));
        return false;
    }

    mysqli_stmt_execute($stmt);
    //error_log("verify_jwt: Statement executed for token hash: $token_hash");

    // Check for mysqlnd driver and handle results
    if (function_exists('mysqli_stmt_get_result')) {
        //error_log("verify_jwt: Using mysqlnd driver");
        $result = mysqli_stmt_get_result($stmt);
        $row = mysqli_fetch_assoc($result);
        mysqli_free_result($result); // Free the result set
    } else {
        //error_log("verify_jwt: mysqlnd driver not available, using fallback");
        $row = null;
        mysqli_stmt_bind_result($stmt, $revoked_at);
        if (mysqli_stmt_fetch($stmt) && $revoked_at === null) {
            $row = ['revoked_at' => null];
        }
    }
    mysqli_stmt_close($stmt); // Close the statement after results

    if (empty($row)) {
        //error_log("verify_jwt: Token not found or revoked for hash: $token_hash");
        return false;
    }
    
       try {
        $decoded = JWT::decode($token, new Key($secret_key, 'HS256'));
        //error_log("verify_jwt: Token decoded, user_id: " . ($decoded->data->user_id ?? 'null'));
        return $decoded->data->user_id ?? false;
    } catch (Exception $e) {
        //error_log("verify_jwt: Token decode failed: " . $e->getMessage());
        return false;
    }

}

function json_response($status, $message, $code = 200, $data = null) {
    http_response_code($code);
    header('Content-Type: application/json');
    $response = ['status' => $status, 'message' => $message];
    if ($data !== null) {
        $response['data'] = $data;
    }
    echo json_encode($response);
    exit;
}