From f1c0034a18482ff85a1979fce94f3abd8622af0b Mon Sep 17 00:00:00 2001
From: Mario <mario@mariovavti.com>
Date: Thu, 6 Jan 2022 21:09:18 +0000
Subject: more work on access tokens

---
 Zotlabs/Module/Tokens.php | 88 +++++++++++++++++++++++++----------------------
 1 file changed, 47 insertions(+), 41 deletions(-)

(limited to 'Zotlabs/Module')

diff --git a/Zotlabs/Module/Tokens.php b/Zotlabs/Module/Tokens.php
index 672bd619e..eedbfcf30 100644
--- a/Zotlabs/Module/Tokens.php
+++ b/Zotlabs/Module/Tokens.php
@@ -24,6 +24,51 @@ class Tokens extends Controller {
 			return;
 
 		check_form_security_token_redirectOnErr('tokens', 'tokens');
+
+		if(isset($_POST['delete'])) {
+			$r = q("select * from atoken where atoken_id = %d and atoken_uid = %d",
+				intval($_POST['atoken_id']),
+				intval(local_channel())
+			);
+
+			if (!$r) {
+				return;
+			}
+
+			$atoken = $r[0];
+			$atoken_xchan = substr($channel['channel_hash'], 0, 16) . '.' . $atoken['atoken_guid'];
+
+			$atoken['deleted'] = true;
+
+			$r = q("SELECT abook.*, xchan.*
+				FROM abook left join xchan on abook_xchan = xchan_hash
+				WHERE abook_channel = %d and abook_xchan = '%s' LIMIT 1",
+				intval($channel['channel_id']),
+				dbesc($atoken_xchan)
+			);
+
+			if (!$r) {
+				return;
+			}
+
+			$clone = $r[0];
+
+			unset($clone['abook_id']);
+			unset($clone['abook_account']);
+			unset($clone['abook_channel']);
+			$clone['deleted'] = true;
+
+			$abconfig = load_abconfig($channel['channel_id'],$clone['abook_xchan']);
+			if ($abconfig) {
+				$clone['abconfig'] = $abconfig;
+			}
+
+			atoken_delete($atoken['atoken_id']);
+			Libsync::build_sync_packet($channel['channel_id'], [ 'abook' => [ $clone ], 'atoken' => [ $atoken ] ], true);
+
+			return;
+		}
+
 		$token_errs = 0;
 		if(array_key_exists('token',$_POST)) {
 			$atoken_id = (($_POST['atoken_id']) ? intval($_POST['atoken_id']) : 0);
@@ -209,48 +254,10 @@ class Tokens extends Controller {
 
 				$atoken_abook = $atoken_abook[0];
 			}
-
-			if($atoken && argc() > 2 && argv(2) === 'drop') {
-				$atoken['deleted'] = true;
-
-				$r = q("SELECT abook.*, xchan.*
-					FROM abook left join xchan on abook_xchan = xchan_hash
-					WHERE abook_channel = %d and abook_xchan = '%s' LIMIT 1",
-					intval($channel['chnnel_id']),
-					dbesc($atoken_xchan)
-				);
-				if (! $r) {
-					return;
-				}
-
-				$clone = $r[0];
-
-				unset($clone['abook_id']);
-				unset($clone['abook_account']);
-				unset($clone['abook_channel']);
-				$clone['deleted'] = true;
-
-				$abconfig = load_abconfig($channel['channel_id'],$clone['abook_xchan']);
-				if ($abconfig) {
-					$clone['abconfig'] = $abconfig;
-				}
-
-				atoken_delete($id);
-				Libsync::build_sync_packet($channel['channel_id'], [ 'abook' => [ $clone ], 'atoken' => [ $atoken ] ], true);
-
-				$atoken = null;
-				$atoken_xchan = '';
-				$atoken_abook = null;
-			}
 		}
 
-		$t = q("select * from atoken where atoken_uid = %d",
-			intval(local_channel())
-		);
-
 		$desc = t('Use this form to create temporary access identifiers to share things with non-members. These identities may be used in Access Control Lists and visitors may login using these credentials to access private content.');
 
-		//TODO: assign role
 		$pcat            = new Permcat(local_channel());
 		$pcatlist        = $pcat->listing();
 		$default_role    = get_pconfig(local_channel(), 'system', 'default_permcat');
@@ -261,7 +268,6 @@ class Tokens extends Controller {
 			$roles_dict[$role['name']] = $role['localname'];
 		}
 
-
 		if (!$current_permcat) {
 			notice(t('Please select a role for this guest!') . EOL);
 			$permcats[] = '';
@@ -279,12 +285,12 @@ class Tokens extends Controller {
 			'$permcat' => ['permcat', t('Select a role for this guest'), $current_permcat, '', $permcats],
 			'$title' => t('Guest Access'),
 			'$desc' => $desc,
-			'$tokens' => $t,
 			'$atoken' => $atoken,
 			'$name' => array('name', t('Login Name') . ' <span class="required">*</span>', (($atoken) ? $atoken['atoken_name'] : ''),''),
 			'$token'=> array('token', t('Login Password') . ' <span class="required">*</span>',(($atoken) ? $atoken['atoken_token'] : new_token()), ''),
 			'$expires'=> array('expires', t('Expires (yyyy-mm-dd)'), (($atoken['atoken_expires'] && $atoken['atoken_expires'] > NULL_DATE) ? datetime_convert('UTC',date_default_timezone_get(),$atoken['atoken_expires']) : ''), ''),
-			'$submit' => t('Submit')
+			'$submit' => t('Submit'),
+			'$delete' => t('Delete')
 		));
 		return $o;
 	}
-- 
cgit v1.2.3