1f81d98c52
Complete port of all 163 API endpoints from Lucee/CFML to PHP 8.3. Shared helpers in api/helpers.php (DB, auth, request/response, security). PDO prepared statements throughout. Same JSON response shapes as CFML.
56 lines
1.4 KiB
PHP
56 lines
1.4 KiB
PHP
<?php
|
|
require_once __DIR__ . '/../helpers.php';
|
|
runAuth();
|
|
|
|
/*
|
|
Send OTP to phone for LOGIN (existing verified accounts only)
|
|
POST: { "phone": "5551234567" }
|
|
Returns: { OK: true, UUID: "..." }
|
|
*/
|
|
|
|
$data = readJsonBody();
|
|
$phone = normalizePhone($data['Phone'] ?? $data['phone'] ?? '');
|
|
|
|
if (strlen($phone) !== 10) {
|
|
apiAbort(['OK' => false, 'ERROR' => 'invalid_phone', 'MESSAGE' => 'Please enter a valid 10-digit phone number']);
|
|
}
|
|
|
|
$user = queryOne(
|
|
"SELECT ID, UUID
|
|
FROM Users
|
|
WHERE ContactNumber = ? AND IsContactVerified = 1
|
|
LIMIT 1",
|
|
[$phone]
|
|
);
|
|
|
|
if (!$user) {
|
|
apiAbort(['OK' => false, 'ERROR' => 'no_account', 'MESSAGE' => "We couldn't find an account with this number. Try signing up instead!"]);
|
|
}
|
|
|
|
$userUUID = $user['UUID'] ?? '';
|
|
if (empty(trim($userUUID))) {
|
|
$userUUID = str_replace('-', '', generateUUID());
|
|
queryTimed("UPDATE Users SET UUID = ? WHERE ID = ?", [$userUUID, $user['ID']]);
|
|
}
|
|
|
|
$otp = random_int(100000, 999999);
|
|
queryTimed("UPDATE Users SET MobileVerifyCode = ? WHERE ID = ?", [$otp, $user['ID']]);
|
|
|
|
// Send OTP via Twilio (skip on dev)
|
|
$smsMessage = 'Code saved (SMS skipped in dev)';
|
|
$dev = isDev();
|
|
|
|
if (!$dev) {
|
|
// TODO: Twilio integration
|
|
$smsMessage = 'Login code sent';
|
|
}
|
|
|
|
$resp = [
|
|
'OK' => true,
|
|
'UUID' => $userUUID,
|
|
'MESSAGE' => $smsMessage,
|
|
];
|
|
if ($dev) {
|
|
$resp['DEV_OTP'] = $otp;
|
|
}
|
|
jsonResponse($resp);
|