Added in editor login feature to login into editor

Signed-off-by: rodude123 <rodude123@gmail.com>

src/api/index.php

@@ -1,4 +1,5 @@
 <?php
+
 session_start();
 ////////////////// Index file //////////////
 /// Creates base routes and runs         ///
@@ -8,13 +9,16 @@ session_start();
 require "../vendor/autoload.php";
 include "timelineData.php";
 include "projectData.php";
+include "user.php";
 use api\projectData;
 use api\timelineData;
+use api\user;
 use Psr\Http\Message\ResponseInterface as Response;
 use Psr\Http\Message\ServerRequestInterface as Request;
 use Selective\SameSiteCookie\SameSiteCookieConfiguration;
 use Slim\Factory\AppFactory;
 use Selective\SameSiteCookie\SameSiteCookieMiddleware;
+use Slim\Handlers\Strategies\RequestHandler;
 
 // Start slim
 $app = AppFactory::create();
@@ -29,42 +33,38 @@ $app->add(new SameSiteCookieMiddleware($ssConfig));
 // for error checking
 $errorMiddleware = $app->addErrorMiddleware(true, true, true);
 
+// set base path for all routes
 $app->setBasePath("/api");
 
+// return all responses as JSON
+$app->add(function($request, $handler) {
+    $response = $handler->handle($request);
+    return $response->withHeader('Content-Type', 'application/json');
+});
+
 $timelineData = new timelineData();
 $projectData = new projectData();
+$user = new user();
 
 $app->get("/timelineData/{timeline}", function (Request $request, Response $response, array $args)
 {
     global $timelineData;
-    $json = $result = "";
 
     //check if route is available if it is get the data
     //otherwise return an error
     if($args["timeline"] == "edu")
     {
-        $result = $timelineData->getEduData();
+        return $response->getBody()->write(json_encode($timelineData->getEduData()));
     }
-    else if($args["timeline"] == "work")
+    
+    if($args["timeline"] == "work")
     {
-        $result = $timelineData->getWorkData();
+        return $response->getBody()->write(json_encode($timelineData->getWorkData()));
     }
-    else
-    {
-        $result = array(array("errorMessage" => "Error, timeline data not found"));
-    }
-
-    $json = json_encode($result);
-
-    $response->getBody()->write($json);
-    //if it is an error give a 404 code since it can't find the data
-    if(array_key_exists("errorMessage", $result))
-    {
-        $response = $response->withStatus(404);
-    }
-
-    //use content type json to indicate json data on frontend.
-    return $response->withHeader("Content-Type", "application/json");
+    
+    // something went wrong
+    $response->getBody()->write(json_encode(array("errorMessage" => "Error, timeline data not found")));
+    return $response->withStatus(404);
 });
 
 $app->get('/projectData', function (Request $request, Response $response)
@@ -83,7 +83,7 @@ $app->get('/projectData', function (Request $request, Response $response)
     }
 
     //use content type json to indicate json data on frontend.
-    return $response->withHeader("Content-Type", "application/json");
+    return $response;
 });
 
 $app->post('/contact', function (Request $request, Response $response)
@@ -92,15 +92,14 @@ $app->post('/contact', function (Request $request, Response $response)
     if(empty($data["fName"]) || empty($data["lName"]) || empty($data["email"]) || empty($data["subject"]) || empty($data["message"]))
     {
       $response->getBody()->write(json_encode(array("errorMessage" => "Please fill out all the fields")));
-      $response = $response->withStatus(400);
-      return $response->withHeader("Content-Type", "application/json");
+      return $response->withStatus(400);
     }
     
     if (!filter_var($data["email"], FILTER_VALIDATE_EMAIL)) 
     {
       $response->getBody()->write(json_encode(array("errorMessage" => "Email is not the correct format")));
       $response = $response->withStatus(400);
-      return $response->withHeader("Content-Type", "application/json");
+      return $response;
     }
     
     // email form filler/conatcter
@@ -260,4 +259,47 @@ $app->post('/contact', function (Request $request, Response $response)
     return $response->withStatus(201);
 });
 
+$app->post('/user/login', function (Request $request, Response $response) {
+    
+    global $user;
+    
+    // get request data
+    $data = $request->getParsedBody();
+    
+    if (empty($data["username"]) || empty($data["password"])) 
+    {
+        // uh oh user sent empty data
+        return $response->withStatus(400);
+    }
+
+    if ($user->checkUser($data["username"], $data["password"]))
+    {
+        // yay user is logged in
+        $_SESSION["token"] = $user->createToken();
+        $_SESSION["username"] = $data["username"];
+        return $response;
+    }
+    return $response->withStatus(401);
+});
+
+$app->get('/user/isLoggedIn', function (Request $request, Response $response) {
+    
+    global $user;
+
+    if (empty($_SESSION["token"]) && empty($_SESSION["username"])) 
+    {
+        // uh oh user not logged in
+        return $response->withStatus(401);
+    }
+
+    if (empty($_SESSION["token"]))
+    {
+        // user is logged in but no token was created
+        $_SESSION["token"] = $user->createToken();
+        return $response;
+    } 
+    
+    return $response->getBody()->write(json_encode(array("token" => $_SESSION["token"])));
+});
+
 $app->run();