R40fendt/ritzenbergen-backend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Login fertiggestellt im Admin Panel

Browse Source
This commit is contained in:
R40fendt
2026-01-03 21:30:18 +01:00
parent a7cad8edca
commit 3c2c8a368e
2 changed files with 41 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
admin/login.php
View File

@@ -1,5 +1,14 @@
<?php
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
include("../../mysqlverbinden.php");
include("../vendor/autoload.php");
use Firebase\JWT\JWT;
use Firebase\JWT\Key;
include("secret.php");
if(!isset($_GET["username"])) die("GET username fehlt");
$username=$_GET["username"];
@@ -11,10 +20,15 @@ $result=mysqli_execute_query($db_id,"SELECT `password` FROM `adminpanel-users` W
if(!isset($result["password"]))
die('{"error":"Falscher Benutzername","success":false}');
if($result["password"]!=$password)
if(!password_verify($password,$result["password"]))
die('{"error":"Falsches Passwort","success":false}');
$token="";
$payload=[
"username"=>$username,
"expire"=>time()+3600
];
$token=JWT::encode($payload,$secret,"HS256");
echo json_encode(["token"=>$token,"success"=>true],JSON_UNESCAPED_UNICODE|JSON_UNESCAPED_SLASHES);

25
admin/userinfo.php
View File

@@ -0,0 +1,25 @@
<?php
header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Headers: Authorization");
include("../../mysqlverbinden.php");
include("secret.php");
include("../vendor/autoload.php");
use Firebase\JWT\JWT;
use Firebase\JWT\Key;
$token = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
// "Bearer " entfernen
$token = str_replace('Bearer ', '', $token);
try {
$payload=JWT::decode($token, new Key($secret,"HS256"));
if($payload->expire<time()) die('{"error":"Token expired"}');
echo json_encode($payload,JSON_UNESCAPED_UNICODE|JSON_UNESCAPED_SLASHES);
}catch(Exception $e){
die('{"error":"Invalid Token"}');
}