Version 4.5.0

applications/core/api/GraphQL/Mutations/SessionEnd.php

@@ -0,0 +1,102 @@
+<?php
+/**
+ * @brief		GraphQL: End a session for the user
+ * @author		<a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
+ * @copyright	(c) 2001 - 2016 Invision Power Services, Inc.
+ * @license		http://www.invisionpower.com/legal/standards/
+ * @package		IPS Community Suite
+ * @since		02 Apr 2019
+ * @version		SVN_VERSION_NUMBER
+ */
+
+namespace IPS\core\api\GraphQL\Mutations;
+use GraphQL\Type\Definition\ObjectType;
+use IPS\Api\GraphQL\TypeRegistry;
+
+/* To prevent PHP errors (extending class does not exist) revealing path */
+if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
+{
+	header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
+	exit;
+}
+
+/**
+ * Register a push token for a specific user
+ */
+class _SessionEnd
+{
+	/*
+	 * @brief 	Query description
+	 */
+	public static $description = "End a user session";
+
+	/*
+	 * Mutation arguments
+	 */
+	public function args()
+	{
+		return [
+			'token' => TypeRegistry::string()
+		];
+	}
+
+	/**
+	 * Return the mutation return type
+	 */
+	public function type() 
+	{
+		return \IPS\core\Api\GraphQL\TypeRegistry::member();
+	}
+
+	/**
+	 * Resolves this mutation
+	 * @todo this is basically copied and pasted from notifications.php which isn't ideal, so we 
+	 * might want to consider refactoring to abstract this functionality.
+	 *
+	 * @param 	mixed 	Value passed into this resolver
+	 * @param 	array 	Arguments
+	 * @param 	array 	Context values
+	 * @return	\IPS\forums\Forum
+	 */
+	public function resolve($val, $args)
+	{
+		if( !\IPS\Member::loggedIn()->member_id )
+		{
+			throw new \IPS\Api\GraphQL\SafeException( 'NOT_LOGGED_IN', 'GQL/0001/6', 403 );
+		}
+		
+		\IPS\Db::i()->delete( 'core_oauth_server_access_tokens', array( 'member_id=? AND access_token=?', \IPS\Member::loggedIn()->member_id, \IPS\Dispatcher::i()->accessToken['access_token'] ) );
+		if ( isset( \IPS\Dispatcher::i()->accessToken['device_key'] ) )
+		{
+			\IPS\Db::i()->delete( 'core_oauth_server_access_tokens', array( 'member_id=? AND device_key=?', \IPS\Member::loggedIn()->member_id, \IPS\Dispatcher::i()->accessToken['device_key'] ) );
+		}
+		
+		if ( isset( $args['token'] ) and $args['token'] )
+		{
+			try
+			{
+				$response = \IPS\Http\Url::ips('mobile/signout')->request()->login( \IPS\Settings::i()->mobile_app_id, \IPS\Settings::i()->mobile_app_secret )->post( array(
+					'member'	=> \IPS\Member::loggedIn()->member_id,
+					'token'	=> $args['token']
+				) )->decodeJson();
+							
+				if ( $response->httpResponseCode != 200 )
+				{
+					throw new \DomainException( (string) $response );
+				}
+				
+				if ( !$response['remainingDevices'] )
+				{
+					\IPS\Member::loggedIn()->members_bitoptions['mobile_notifications'] = FALSE;
+					\IPS\Member::loggedIn()->save();
+				}
+			}
+			catch ( \Exception $e )
+			{
+				\IPS\Log::log( $e, 'mobile-push-notifications' );
+			}
+		}
+
+		return \IPS\Member::loggedIn();
+	}
+}