File Manager

✏️ Edit File: /home/u625410797/domains/monothailand.com/public_html/ecotect_air/api/v1/auth/register.php

<?php
/**
 * User Registration Endpoint
 *
 * POST /api/v1/auth/register.php
 * Creates a new user account with email and password
 *
 * @package Ecotech\API\Auth
 * @version 1.0.0
 */

require_once '../../../config.php';
require_once '../../../core/PasswordHasher.php';
require_once '../../../core/JWTHandler.php';

// Handle CORS preflight
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}

// Only accept POST requests
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    Response::error(405, "Method Not Allowed", "Only POST requests are accepted");
}

// Get JSON input
$input = json_decode(file_get_contents('php://input'), true);

// Validate required fields
$email = $input['email'] ?? '';
$password = $input['password'] ?? '';
$displayName = $input['display_name'] ?? $input['name'] ?? '';

if (empty($email) || empty($password)) {
    Response::error(400, "Bad Request", "Email and password are required");
}

// Validate email format
if (!Security::isValidEmail($email)) {
    Response::error(400, "Bad Request", "Invalid email format");
}

// Validate password strength
$hasher = new PasswordHasher();
$validation = $hasher->validatePasswordStrength($password);

if (!$validation['valid']) {
    $errorMsg = implode(' ', $validation['errors']);
    Response::error(400, $errorMsg, [
        'errors' => $validation['errors']
    ]);
}

try {
    // Check if email already exists
    $stmt = $pdo->prepare("SELECT id FROM users WHERE email = ?");
    $stmt->execute([$email]);

if ($stmt->fetch()) {
        Response::error(409, "Conflict", "Email already registered");
    }

// Generate user ID
    $userId = bin2hex(random_bytes(18)); // 36 chars hex

// Hash password
    $passwordHash = $hasher->hash($password);

// Insert new user
    $stmt = $pdo->prepare("
        INSERT INTO users (
            id, email, display_name, password_hash,
            role, access_level, status, created_at
        ) VALUES (?, ?, ?, ?, 'Viewer', 1, 'active', NOW())
    ");

$stmt->execute([
        $userId,
        $email,
        $displayName ?: explode('@', $email)[0],
        $passwordHash
    ]);

// Generate JWT tokens
    $jwt = new JWTHandler();

$payload = [
        'user_id' => $userId,
        'id' => $userId,
        'email' => $email,
        'role' => 'Viewer'
    ];

$accessToken = $jwt->generateAccessToken($payload);
    $refreshToken = $jwt->generateRefreshToken($userId);

// Save refresh token to database
    $refreshTokenExpiry = date('Y-m-d H:i:s', time() + $jwt->getTokenExpiry('refresh'));

// Fix: users table uses last_login (not last_login_at), and refresh_token is now in user_sessions only
    $stmt = $pdo->prepare("
        UPDATE users
        SET last_login = NOW()
        WHERE id = ?
    ");

$stmt->execute([$userId]);

// Create session record
    $sessionId = bin2hex(random_bytes(18));
    $deviceFingerprint = $_SERVER['HTTP_USER_AGENT'] ?? 'unknown';

// Fix: user_sessions in V13 only has device_fingerprint, refresh_token, expires_at (no ip_address or user_agent)
    $stmt = $pdo->prepare("
        INSERT INTO user_sessions (
            id, user_id, device_fingerprint, refresh_token, expires_at, created_at
        ) VALUES (?, ?, ?, ?, ?, NOW())
    ");

$stmt->execute([
        $sessionId,
        $userId,
        substr($deviceFingerprint, 0, 255),
        $refreshToken,
        $refreshTokenExpiry
    ]);

// Return success with tokens
    Response::success([
        'user' => [
            'id' => $userId,
            'email' => $email,
            'display_name' => $displayName ?: explode('@', $email)[0],
            'role' => 'Viewer'
        ],
        'tokens' => [
            'access_token' => $accessToken,
            'refresh_token' => $refreshToken,
            'expires_in' => $jwt->getTokenExpiry('access'),
            'token_type' => 'Bearer'
        ]
    ], "Registration successful");

} catch (PDOException $e) {
    error_log("Registration PDO Error: " . $e->getMessage());
    Response::error(500, "Registration failed", $e->getMessage());
} catch (Throwable $e) {
    error_log("Registration Error: " . $e->getMessage());
    Response::error(500, "Registration failed", $e->getMessage());
}

Batal

⬅ Naik ke v1 6 item

Nama	Tipe	Ukuran	Diubah	Aksi
🐘forgot_password.php	php	3.4 KB	2026-02-21 07:17	✏️ Edit 👁️ View
🐘login.php	php	5.5 KB	2026-02-21 07:17	✏️ Edit 👁️ View
🐘logout.php	php	1.9 KB	2026-02-21 07:17	✏️ Edit 👁️ View
🐘refresh_token.php	php	3.8 KB	2026-02-21 07:17	✏️ Edit 👁️ View
🐘register.php	php	4.2 KB	2026-06-26 11:07	✏️ Edit 👁️ View
🐘reset_password.php	php	2.6 KB	2026-02-21 07:17	✏️ Edit 👁️ View