📄 File: auth_token.php

Path: /home2/outerorb/assetradar.outerorbittech.com/api/auth_token.php

Size: 1.01 KB

Permissions: 0666

<?php
// Simple token auth endpoint - POST email & password -> returns api_token
require_once __DIR__ . '/../config.php';
header('Content-Type: application/json');
if ($_SERVER['REQUEST_METHOD'] !== 'POST') { http_response_code(405); echo json_encode(['error'=>'Method']); exit; }
$body = $_POST;
$email = $body['email'] ?? '';
$pwd = $body['password'] ?? '';
$stmt = $mysqli->prepare('SELECT id,password FROM users WHERE email=? AND deleted=0 LIMIT 1');
$stmt->bind_param('s',$email);
$stmt->execute();
$res = $stmt->get_result();
if (!$res || !$row = $res->fetch_assoc()) { http_response_code(401); echo json_encode(['error'=>'Invalid']); exit; }
if (!password_verify($pwd, $row['password'])) { http_response_code(401); echo json_encode(['error'=>'Invalid']); exit; }
// generate token
$token = bin2hex(random_bytes(24));
$stmt2 = $mysqli->prepare('INSERT INTO api_tokens (user_id, token, created_at) VALUES (?,?,NOW())');
$stmt2->bind_param('is',$row['id'],$token);
$stmt2->execute();
echo json_encode(['api_token'=>$token]);

← Back to Directory Edit File 🔒 Chmod