d8d7efe056
- Add avatar.cfm: GET/POST for user profile photos with multi-extension support - Add profile.cfm: GET/POST for user profile (name, email, phone) - Add history.cfm: Order history endpoint with pagination - Add addresses/list.cfm and add.cfm: Delivery address management - Add setOrderType.cfm: Set delivery/takeaway type on orders - Add checkToken.cfm: Debug endpoint for token validation - Fix headerValue() in Application.cfm to use servlet request object (Lucee CGI scope doesn't expose custom HTTP headers like X-User-Token) - Update public allowlist for new endpoints - Add privacy.html page 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
73 lines
2 KiB
Text
73 lines
2 KiB
Text
<cfsetting showdebugoutput="false">
|
|
<cfsetting enablecfoutputonly="true">
|
|
<cfcontent type="application/json; charset=utf-8" reset="true">
|
|
|
|
<cfscript>
|
|
function headerValue(name) {
|
|
// Use servlet request object to get headers (CGI scope doesn't expose custom HTTP headers in Lucee)
|
|
try {
|
|
req = getPageContext().getRequest();
|
|
val = req.getHeader(arguments.name);
|
|
if (!isNull(val)) return trim(val);
|
|
} catch (any e) {
|
|
// Fall back to CGI scope
|
|
k = "HTTP_" & ucase(reReplace(arguments.name, "[^A-Za-z0-9]", "_", "all"));
|
|
if (structKeyExists(cgi, k)) return trim(cgi[k]);
|
|
}
|
|
return "";
|
|
}
|
|
|
|
userToken = headerValue("X-User-Token");
|
|
|
|
result = {
|
|
"receivedToken": userToken,
|
|
"tokenLength": len(userToken),
|
|
"tokenPrefix": len(userToken) > 8 ? left(userToken, 8) : userToken
|
|
};
|
|
|
|
if (len(userToken)) {
|
|
try {
|
|
qTok = queryExecute(
|
|
"SELECT UserID, Token FROM UserTokens WHERE Token = ? LIMIT 1",
|
|
[ { value = userToken, cfsqltype = "cf_sql_varchar" } ],
|
|
{ datasource = "payfrit" }
|
|
);
|
|
result.dbLookupRecords = qTok.recordCount;
|
|
if (qTok.recordCount > 0) {
|
|
result.foundUserId = qTok.UserID;
|
|
}
|
|
|
|
// Also check with LIKE to see if partial match exists
|
|
qPartial = queryExecute(
|
|
"SELECT UserID, Token FROM UserTokens WHERE Token LIKE ? LIMIT 5",
|
|
[ { value = left(userToken, 8) & "%", cfsqltype = "cf_sql_varchar" } ],
|
|
{ datasource = "payfrit" }
|
|
);
|
|
result.partialMatches = qPartial.recordCount;
|
|
|
|
} catch (any e) {
|
|
result.error = e.message;
|
|
}
|
|
}
|
|
|
|
// Also list recent tokens
|
|
try {
|
|
qRecent = queryExecute(
|
|
"SELECT UserID, LEFT(Token, 8) as TokenPrefix, LENGTH(Token) as TokenLen FROM UserTokens ORDER BY UserID DESC LIMIT 5",
|
|
[],
|
|
{ datasource = "payfrit" }
|
|
);
|
|
result.recentTokens = [];
|
|
for (row in qRecent) {
|
|
arrayAppend(result.recentTokens, {
|
|
"userId": row.UserID,
|
|
"prefix": row.TokenPrefix,
|
|
"length": row.TokenLen
|
|
});
|
|
}
|
|
} catch (any e) {
|
|
result.recentTokensError = e.message;
|
|
}
|
|
|
|
writeOutput(serializeJSON(result));
|
|
</cfscript>
|