nilsteampassnet / TeamPass

api/Controller/Api/BaseController.php

Spacing +3 added lines, -3 removed lines

@@ -47,7 +47,7 @@ 
         $requestUri = $request->getRequestUri();
 
         $uri = parse_url($requestUri, PHP_URL_PATH);
-        $uri = explode( '/', $uri );
+        $uri = explode('/', $uri);
         return $this->sanitizeUrl(array_slice($uri, ((int) array_search('index.php', $uri) + 1)));
     }
 
@@ -74,7 +74,7 @@ 
     {
         $filters = [];
         $array_size = count($array);
-        for ($i=0; $i < $array_size; $i++) {
+        for ($i = 0; $i < $array_size; $i++) {
             array_push($filters, 'trim|escape');
         }
         
@@ -92,7 +92,7 @@ 
      * @param mixed  $data
      * @param string $httpHeader
      */
-    protected function sendOutput($data, $httpHeaders=array()): void
+    protected function sendOutput($data, $httpHeaders = array()): void
     {
         header_remove('Set-Cookie');
 

api/Controller/Api/ItemController.php

Spacing +6 added lines, -6 removed lines

@@ -40,11 +40,11 @@ 
      */
     private function getUserPrivateKey(array $userData): ?string
     {
-        include_once API_ROOT_PATH . '/inc/jwt_utils.php';
+        include_once API_ROOT_PATH.'/inc/jwt_utils.php';
 
         // Verify session_key exists in JWT payload
         if (!isset($userData['session_key']) || empty($userData['session_key'])) {
-            error_log('getUserPrivateKey: Missing session_key in JWT token for user ID ' . $userData['id']);
+            error_log('getUserPrivateKey: Missing session_key in JWT token for user ID '.$userData['id']);
             return null;
         }
 
@@ -88,7 +88,7 @@ 
             // SQL where clause with folders list
             if (isset($arrQueryStringParams['folders']) === true) {
                 // convert the folders to an array
-                $arrQueryStringParams['folders'] = explode(',', str_replace( array('[',']') , ''  , $arrQueryStringParams['folders']));
+                $arrQueryStringParams['folders'] = explode(',', str_replace(array('[', ']'), '', $arrQueryStringParams['folders']));
 
                 // ensure to only use the intersection
                 $foldersList = implode(',', array_intersect($arrQueryStringParams['folders'], $userData['folders_list']));
@@ -256,7 +256,7 @@ 
                 } else {
                     // Gérer le cas où les paramètres ne sont pas un tableau
                     $strErrorDesc = 'Data not consistent';
-                    $strErrorHeader = 'Expected array, received ' . gettype($arrQueryStringParams);
+                    $strErrorHeader = 'Expected array, received '.gettype($arrQueryStringParams);
                 }
             }
         } else {
@@ -307,10 +307,10 @@ 
             // SQL where clause with item id
             if (isset($arrQueryStringParams['id']) === true) {
                 // build sql where clause by ID
-                $sqlExtra = ' WHERE i.id = '.$arrQueryStringParams['id'] . $sql_constraint;
+                $sqlExtra = ' WHERE i.id = '.$arrQueryStringParams['id'].$sql_constraint;
             } else if (isset($arrQueryStringParams['label']) === true) {
                 // build sql where clause by LABEL
-                $sqlExtra = ' WHERE i.label '.(isset($arrQueryStringParams['like']) === true && (int) $arrQueryStringParams['like'] === 1 ? ' LIKE '.$arrQueryStringParams['label'] : ' = '.$arrQueryStringParams['label']) . $sql_constraint;
+                $sqlExtra = ' WHERE i.label '.(isset($arrQueryStringParams['like']) === true && (int) $arrQueryStringParams['like'] === 1 ? ' LIKE '.$arrQueryStringParams['label'] : ' = '.$arrQueryStringParams['label']).$sql_constraint;
             } else if (isset($arrQueryStringParams['description']) === true) {
                 // build sql where clause by LABEL
                 $sqlExtra = ' WHERE i.description '.(isset($arrQueryStringParams['like']) === true && (int) $arrQueryStringParams['like'] === 1 ? ' LIKE '.$arrQueryStringParams['description'] : ' = '.$arrQueryStringParams['description']).$sql_constraint;

api/Model/AuthModel.php

Indentation +1 added lines, -1 removed lines

@@ -231,7 +231,7 @@
         $configManager = new ConfigManager();
         $SETTINGS = $configManager->getAllSettings();
 
-		$payload = [
+        $payload = [
             'username' => $login,
             'id' => $id,
             'exp' => (time() + $SETTINGS['api_token_duration'] + 600),

Spacing +9 added lines, -9 removed lines

@@ -49,7 +49,7 @@ 
     public function getUserAuth(string $login, string $password, string $apikey): array
     {
         // Sanitize
-        include_once API_ROOT_PATH . '/../sources/main.functions.php';
+        include_once API_ROOT_PATH.'/../sources/main.functions.php';
         $inputData = dataSanitizer(
             [
                 'login' => isset($login) === true ? $login : '',
@@ -74,8 +74,8 @@ 
             // Check if user exists
             $userInfo = DB::queryfirstrow(
                 "SELECT u.id, u.pw, u.login, u.admin, u.gestionnaire, u.can_manage_all_users, u.fonction_id, u.can_create_root_folder, u.public_key, u.private_key, u.personal_folder, u.fonction_id, u.groupes_visibles, u.groupes_interdits, a.value AS user_api_key, a.allowed_folders as user_api_allowed_folders, a.enabled, a.allowed_to_create, a.allowed_to_read, a.allowed_to_update, a.allowed_to_delete
-                FROM " . prefixTable('users') . " AS u
-                INNER JOIN " . prefixTable('api') . " AS a ON (a.user_id=u.id)
+                FROM " . prefixTable('users')." AS u
+                INNER JOIN " . prefixTable('api')." AS a ON (a.user_id=u.id)
                 WHERE login = %s",
                 $inputData['login']
             );
@@ -118,7 +118,7 @@ 
 
                 // Encrypt the decrypted private key with the session key
                 // This allows us to store it securely in the database without exposing it
-                require_once API_ROOT_PATH . '/inc/encryption_utils.php';
+                require_once API_ROOT_PATH.'/inc/encryption_utils.php';
                 $encryptedPrivateKey = encrypt_with_session_key($privateKeyClear, $sessionKey);
 
                 if ($encryptedPrivateKey === false) {
@@ -285,7 +285,7 @@ 
         if (count($userFunctionId) > 0) {
             $rows = DB::query(
                 'SELECT * 
-                FROM ' . prefixTable('roles_values') . '
+                FROM ' . prefixTable('roles_values').'
                 WHERE role_id IN %li  AND type IN ("W", "ND", "NE", "NDNE", "R")',
                 $userFunctionId
             );
@@ -311,7 +311,7 @@ 
         $inc = 0;
         $rows = DB::query(
             'SELECT id, id_tree 
-            FROM ' . prefixTable('items') . '
+            FROM ' . prefixTable('items').'
             WHERE restricted_to LIKE %s'.
             (count($userFunctionId) > 0 ? ' AND id_tree NOT IN %li' : ''),
             $userInfo['id'],
@@ -326,8 +326,8 @@ 
         // Check for the users roles if some specific rights exist on items
         $rows = DB::query(
             'SELECT i.id_tree, r.item_id
-            FROM ' . prefixTable('items') . ' AS i
-            INNER JOIN ' . prefixTable('restriction_to_roles') . ' AS r ON (r.item_id=i.id)
+            FROM ' . prefixTable('items').' AS i
+            INNER JOIN ' . prefixTable('restriction_to_roles').' AS r ON (r.item_id=i.id)
             WHERE '.(count($userFunctionId) > 0 ? ' id_tree NOT IN %li AND ' : '').' i.id_tree != ""
             ORDER BY i.id_tree ASC',
             count($userFunctionId) > 0 ? $userFunctionId : DB::sqleval('0')
@@ -343,7 +343,7 @@ 
         // Add all personal folders
         $rows = DB::queryFirstRow(
             'SELECT id 
-            FROM ' . prefixTable('nested_tree') . '
+            FROM ' . prefixTable('nested_tree').'
             WHERE title = %i AND personal_folder = 1'.
             (count($userFunctionId) > 0 ? ' AND id NOT IN %li' : ''),
             $userInfo['id'],

api/inc/bootstrap.php

Spacing +12 added lines, -12 removed lines

@@ -25,18 +25,18 @@ 
 
 use TeampassClasses\ConfigManager\ConfigManager;
 
-define("API_ROOT_PATH", __DIR__ . "/..");
+define("API_ROOT_PATH", __DIR__."/..");
 
 // include main configuration file
-require API_ROOT_PATH . '/../sources/main.functions.php';
+require API_ROOT_PATH.'/../sources/main.functions.php';
 
 // include the base controller file
-require API_ROOT_PATH . "/Controller/Api/BaseController.php";
+require API_ROOT_PATH."/Controller/Api/BaseController.php";
 
 // include the use model file
-require API_ROOT_PATH . "/Model/UserModel.php";
-require API_ROOT_PATH . "/Model/ItemModel.php";
-require API_ROOT_PATH . "/Model/FolderModel.php";
+require API_ROOT_PATH."/Model/UserModel.php";
+require API_ROOT_PATH."/Model/ItemModel.php";
+require API_ROOT_PATH."/Model/FolderModel.php";
 
 /**
  * Launch expected action for ITEM
@@ -56,9 +56,9 @@ 
         return;
     }
     // Perform the action
-    require API_ROOT_PATH . "/Controller/Api/ItemController.php";    
+    require API_ROOT_PATH."/Controller/Api/ItemController.php";    
     $objFeedController = new ItemController();
-    $strMethodName = $actions[0] . 'Action';
+    $strMethodName = $actions[0].'Action';
     $objFeedController->{$strMethodName}($userData);
 }
 
@@ -80,9 +80,9 @@ 
         return;
     }
     // Perform the action
-    require API_ROOT_PATH . "/Controller/Api/FolderController.php";
+    require API_ROOT_PATH."/Controller/Api/FolderController.php";
     $objFeedController = new FolderController();
-    $strMethodName = $actions[0] . 'Action';
+    $strMethodName = $actions[0].'Action';
     $objFeedController->{$strMethodName}($userData);
 }
 
@@ -139,7 +139,7 @@ 
  */
 function verifyAuth(): string
 {
-    include_once API_ROOT_PATH . '/inc/jwt_utils.php';
+    include_once API_ROOT_PATH.'/inc/jwt_utils.php';
     $bearer_token = get_bearer_token();
 
     if (empty($bearer_token) === false && is_jwt_valid($bearer_token) === true) {
@@ -169,7 +169,7 @@ 
  */
 function getDataFromToken(): string
 {
-    include_once API_ROOT_PATH . '/inc/jwt_utils.php';
+    include_once API_ROOT_PATH.'/inc/jwt_utils.php';
     $bearer_token = get_bearer_token();
 
     if (empty($bearer_token) === false) {

api/inc/jwt_utils.php

Spacing +7 added lines, -7 removed lines

@@ -148,34 +148,34 @@ 
  */
 function get_user_keys(int $userId, string $keyTempo, string $sessionKey): ?array
 {
-    require_once API_ROOT_PATH . '/inc/encryption_utils.php';
+    require_once API_ROOT_PATH.'/inc/encryption_utils.php';
 
     // Retrieve user's public key and encrypted private key from database
     $userInfo = DB::queryfirstrow(
         "SELECT u.public_key, u.key_tempo, a.encrypted_private_key
-        FROM " . prefixTable('users') . " AS u
-        INNER JOIN " . prefixTable('api') . " AS a ON (a.user_id = u.id)
+        FROM " . prefixTable('users')." AS u
+        INNER JOIN " . prefixTable('api')." AS a ON (a.user_id = u.id)
         WHERE u.id = %i",
         $userId
     );
 
     if (DB::count() === 0) {
         // User not found or no API configuration
-        error_log('[API] get_user_keys: User not found or no API config for user ID ' . $userId);
+        error_log('[API] get_user_keys: User not found or no API config for user ID '.$userId);
         return null;
     }
 
     // Validate key_tempo matches (security check - ensures session is still valid)
     if ($userInfo['key_tempo'] !== $keyTempo) {
         // Session invalid or expired
-        error_log('[API] get_user_keys: Invalid key_tempo for user ID ' . $userId);
+        error_log('[API] get_user_keys: Invalid key_tempo for user ID '.$userId);
         return null;
     }
 
     // Check if encrypted private key exists
     if (empty($userInfo['encrypted_private_key'])) {
         // No encrypted key found - user needs to re-authenticate
-        error_log('[API] get_user_keys: No encrypted private key found for user ID ' . $userId);
+        error_log('[API] get_user_keys: No encrypted private key found for user ID '.$userId);
         return null;
     }
 
@@ -195,7 +195,7 @@ 
 
     if ($privateKeyDecrypted === false) {
         // Decryption failed - wrong key or tampered data
-        error_log('[API] get_user_keys: Failed to decrypt private key for user ID ' . $userId);
+        error_log('[API] get_user_keys: Failed to decrypt private key for user ID '.$userId);
         return null;
     }
 

api/inc/encryption_utils.php

Spacing +5 added lines, -5 removed lines

@@ -47,7 +47,7 @@ 
 function encrypt_with_session_key(string $data, string $key)
 {
     if (strlen($key) !== 32) {
-        error_log('[API] encrypt_with_session_key: Invalid key length. Expected 32 bytes, got ' . strlen($key));
+        error_log('[API] encrypt_with_session_key: Invalid key length. Expected 32 bytes, got '.strlen($key));
         return false;
     }
 
@@ -74,10 +74,10 @@ 
 
         // Combine nonce + tag + ciphertext and encode in base64
         // Format: [12 bytes nonce][16 bytes tag][variable ciphertext]
-        return base64_encode($nonce . $tag . $ciphertext);
+        return base64_encode($nonce.$tag.$ciphertext);
 
     } catch (Exception $e) {
-        error_log('[API] encrypt_with_session_key: Exception - ' . $e->getMessage());
+        error_log('[API] encrypt_with_session_key: Exception - '.$e->getMessage());
         return false;
     }
 }
@@ -95,7 +95,7 @@ 
 function decrypt_with_session_key(string $encryptedData, string $key)
 {
     if (strlen($key) !== 32) {
-        error_log('[API] decrypt_with_session_key: Invalid key length. Expected 32 bytes, got ' . strlen($key));
+        error_log('[API] decrypt_with_session_key: Invalid key length. Expected 32 bytes, got '.strlen($key));
         return false;
     }
 
@@ -136,7 +136,7 @@ 
         return $plaintext;
 
     } catch (Exception $e) {
-        error_log('[API] decrypt_with_session_key: Exception - ' . $e->getMessage());
+        error_log('[API] decrypt_with_session_key: Exception - '.$e->getMessage());
         return false;
     }
 }