1210249f54
Update all SQL queries, query result references, and ColdFusion code to match
the renamed database schema. Tables use plural CamelCase, PKs are all `ID`,
column prefixes stripped (e.g. BusinessName→Name, UserFirstName→FirstName).
Key changes:
- Strip table-name prefixes from all column references (Businesses, Users,
Addresses, Hours, Menus, Categories, Items, Stations, Orders,
OrderLineItems, Tasks, TaskCategories, TaskRatings, QuickTaskTemplates,
ScheduledTaskDefinitions, ChatMessages, Beacons, ServicePoints, Employees,
VisitorTrackings, ApiPerfLogs, tt_States, tt_Days, tt_AddressTypes,
tt_OrderTypes, tt_TaskTypes)
- Rename PK references from {TableName}ID to ID in all queries
- Rewrite 7 admin beacon files to use ServicePoints.BeaconID instead of
dropped lt_Beacon_Businesses_ServicePoints link table
- Rewrite beacon assignment files (list, save, delete) for new schema
- Fix FK references incorrectly changed to ID (OrderLineItems.OrderID,
Categories.MenuID, Tasks.CategoryID, ServicePoints.BeaconID)
- Update Addresses: AddressLat→Latitude, AddressLng→Longitude
- Update Users: UserPassword→Password, UserIsEmailVerified→IsEmailVerified,
UserIsActive→IsActive, UserBalance→Balance, etc.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
116 lines
2.8 KiB
Text
116 lines
2.8 KiB
Text
<cfsetting showdebugoutput="false">
|
|
<cfsetting enablecfoutputonly="true">
|
|
<cfcontent type="application/json; charset=utf-8" reset="true">
|
|
<cfheader name="Cache-Control" value="no-store">
|
|
|
|
<cfscript>
|
|
/*
|
|
PATH:
|
|
C:\lucee\tomcat\webapps\ROOT\biz.payfrit.com\api\auth\login.cfm
|
|
|
|
INPUT (JSON):
|
|
{ "username": "...", "password": "..." }
|
|
|
|
OUTPUT (JSON):
|
|
{ OK:true, ERROR:"", UserID:123, FirstName:"...", Token:"..." }
|
|
|
|
Uses existing UserTokens table:
|
|
TokenID (auto), UserID, Token, CreatedAt (DEFAULT CURRENT_TIMESTAMP)
|
|
-> INSERT does NOT include CreatedAt.
|
|
*/
|
|
|
|
function apiAbort(required struct payload) {
|
|
writeOutput(serializeJSON(payload));
|
|
abort;
|
|
}
|
|
|
|
function readJsonBody() {
|
|
var raw = getHttpRequestData().content;
|
|
if (isNull(raw)) raw = "";
|
|
if (!len(trim(raw))) return {};
|
|
try {
|
|
var data = deserializeJSON(raw);
|
|
if (isStruct(data)) return data;
|
|
} catch (any e) {}
|
|
return {};
|
|
}
|
|
|
|
function normalizeUsername(required string u) {
|
|
var x = trim(arguments.u);
|
|
x = replace(x, " ", "", "all");
|
|
x = replace(x, "(", "", "all");
|
|
x = replace(x, ")", "", "all");
|
|
x = replace(x, "-", "", "all");
|
|
return x;
|
|
}
|
|
|
|
data = readJsonBody();
|
|
username = structKeyExists(data, "username") ? normalizeUsername("" & data.username) : "";
|
|
password = structKeyExists(data, "password") ? ("" & data.password) : "";
|
|
|
|
if (!len(username) || !len(password)) {
|
|
apiAbort({ "OK": false, "ERROR": "missing_fields" });
|
|
}
|
|
|
|
try {
|
|
q = queryExecute(
|
|
"
|
|
SELECT ID, FirstName
|
|
FROM Users
|
|
WHERE
|
|
(
|
|
(EmailAddress = ?) OR
|
|
(ContactNumber = ?)
|
|
)
|
|
AND Password = ?
|
|
AND IsEmailVerified = 1
|
|
AND IsContactVerified > 0
|
|
LIMIT 1
|
|
",
|
|
[
|
|
{ value = username, cfsqltype = "cf_sql_varchar" },
|
|
{ value = username, cfsqltype = "cf_sql_varchar" },
|
|
{ value = hash(password), cfsqltype = "cf_sql_varchar" }
|
|
],
|
|
{ datasource = "payfrit" }
|
|
);
|
|
|
|
if (q.recordCount NEQ 1) {
|
|
apiAbort({ "OK": false, "ERROR": "bad_credentials" });
|
|
}
|
|
|
|
token = replace(createUUID(), "-", "", "all");
|
|
|
|
queryExecute(
|
|
"INSERT INTO UserTokens (UserID, Token) VALUES (?, ?)",
|
|
[
|
|
{ value = q.ID, cfsqltype = "cf_sql_integer" },
|
|
{ value = token, cfsqltype = "cf_sql_varchar" }
|
|
],
|
|
{ datasource = "payfrit" }
|
|
);
|
|
|
|
// Optional: also set session for browser tools
|
|
lock timeout="15" throwontimeout="yes" type="exclusive" scope="session" {
|
|
session.UserID = q.ID;
|
|
}
|
|
request.UserID = q.ID;
|
|
|
|
writeOutput(serializeJSON({
|
|
"OK": true,
|
|
"ERROR": "",
|
|
"UserID": q.ID,
|
|
"FirstName": q.FirstName,
|
|
"Token": token
|
|
}));
|
|
abort;
|
|
|
|
} catch (any e) {
|
|
apiAbort({
|
|
"OK": false,
|
|
"ERROR": "server_error",
|
|
"MESSAGE": "DB error during login",
|
|
"DETAIL": e.message
|
|
});
|
|
}
|
|
</cfscript>
|