UsersApiSessionsTable.php

Go to the documentation of this file.

<?php

namespace Elgg\Database;

use Elgg\Database;
use Elgg\Security\Crypto;
use Elgg\Traits\TimeUsing;

class UsersApiSessionsTable {
    
    use TimeUsing;
    
    protected $database;
    
    protected $crypto;
    
    protected $table = 'users_apisessions';
    
    public function __construct(Database $database, Crypto $crypto) {
        $this->database = $database;
        $this->crypto = $crypto;
    }
    
    public function createToken(int $user_guid, int $expires = 60) {
        $token = $this->crypto->getRandomString(32, Crypto::CHARS_HEX);
        $expires = $this->getCurrentTime("+{$expires} minutes");
        
        $insert = Insert::intoTable($this->table);
        $insert->values([
            'user_guid' => $insert->param($user_guid, ELGG_VALUE_GUID),
            'token' => $insert->param($token, ELGG_VALUE_STRING),
            'expires' => $insert->param($expires->getTimestamp(), ELGG_VALUE_TIMESTAMP),
        ]);
        
        if ($this->database->insertData($insert)) {
            return $token;
        }
        
        return false;
    }
    
    public function getUserTokens(int $user_guid) {
        $select = Select::fromTable($this->table);
        $select->select('*')
            ->where($select->compare('user_guid', '=', $user_guid, ELGG_VALUE_GUID));
        
        return $this->database->getData($select);
    }
    
    public function validateToken(string $token) {
        $select = Select::fromTable($this->table);
        $select->select('*')
            ->where($select->compare('token', '=', $token, ELGG_VALUE_STRING))
            ->andWhere($select->compare('expires', '>', $this->getCurrentTime()->getTimestamp(), ELGG_VALUE_TIMESTAMP));
        
        $row = $this->database->getDataRow($select);
        if (empty($row)) {
            return false;
        }
        
        return (int) $row->user_guid;
    }
    
    public function removeToken(string $token) {
        $delete = Delete::fromTable($this->table);
        $delete->where($delete->compare('token', '=', $token, ELGG_VALUE_STRING));
        
        return (bool) $this->database->deleteData($delete);
    }
    
    public function removeExpiresTokens() {
        $delete = Delete::fromTable($this->table);
        $delete->where($delete->compare('expires', '<', $this->getCurrentTime()->getTimestamp(), ELGG_VALUE_TIMESTAMP));
        
        return $this->database->deleteData($delete);
    }
}