103 lines
2.9 KiB
PHP
103 lines
2.9 KiB
PHP
<?php
|
|
/**
|
|
* @brief GraphQL: End a session for the user
|
|
* @author <a href='http://www.invisionpower.com'>Invision Power Services, Inc.</a>
|
|
* @copyright (c) 2001 - 2016 Invision Power Services, Inc.
|
|
* @license http://www.invisionpower.com/legal/standards/
|
|
* @package IPS Community Suite
|
|
* @since 02 Apr 2019
|
|
* @version SVN_VERSION_NUMBER
|
|
*/
|
|
|
|
namespace IPS\core\api\GraphQL\Mutations;
|
|
use GraphQL\Type\Definition\ObjectType;
|
|
use IPS\Api\GraphQL\TypeRegistry;
|
|
|
|
/* To prevent PHP errors (extending class does not exist) revealing path */
|
|
if ( !\defined( '\IPS\SUITE_UNIQUE_KEY' ) )
|
|
{
|
|
header( ( isset( $_SERVER['SERVER_PROTOCOL'] ) ? $_SERVER['SERVER_PROTOCOL'] : 'HTTP/1.0' ) . ' 403 Forbidden' );
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* Register a push token for a specific user
|
|
*/
|
|
class _SessionEnd
|
|
{
|
|
/*
|
|
* @brief Query description
|
|
*/
|
|
public static $description = "End a user session";
|
|
|
|
/*
|
|
* Mutation arguments
|
|
*/
|
|
public function args()
|
|
{
|
|
return [
|
|
'token' => TypeRegistry::string()
|
|
];
|
|
}
|
|
|
|
/**
|
|
* Return the mutation return type
|
|
*/
|
|
public function type()
|
|
{
|
|
return \IPS\core\Api\GraphQL\TypeRegistry::member();
|
|
}
|
|
|
|
/**
|
|
* Resolves this mutation
|
|
* @todo this is basically copied and pasted from notifications.php which isn't ideal, so we
|
|
* might want to consider refactoring to abstract this functionality.
|
|
*
|
|
* @param mixed Value passed into this resolver
|
|
* @param array Arguments
|
|
* @param array Context values
|
|
* @return \IPS\forums\Forum
|
|
*/
|
|
public function resolve($val, $args)
|
|
{
|
|
if( !\IPS\Member::loggedIn()->member_id )
|
|
{
|
|
throw new \IPS\Api\GraphQL\SafeException( 'NOT_LOGGED_IN', 'GQL/0001/6', 403 );
|
|
}
|
|
|
|
\IPS\Db::i()->update( 'core_oauth_server_access_tokens', array( 'status' => 'revoked' ), array( 'member_id=? AND access_token=?', \IPS\Member::loggedIn()->member_id, \IPS\Dispatcher::i()->accessToken['access_token'] ) );
|
|
if ( isset( \IPS\Dispatcher::i()->accessToken['device_key'] ) )
|
|
{
|
|
\IPS\Db::i()->update( 'core_oauth_server_access_tokens', array( 'status' => 'revoked' ), array( 'member_id=? AND device_key=?', \IPS\Member::loggedIn()->member_id, \IPS\Dispatcher::i()->accessToken['device_key'] ) );
|
|
}
|
|
|
|
if ( isset( $args['token'] ) and $args['token'] )
|
|
{
|
|
try
|
|
{
|
|
$response = \IPS\Http\Url::ips('mobile/signout')->request()->login( \IPS\Settings::i()->mobile_app_id, \IPS\Settings::i()->mobile_app_secret )->post( array(
|
|
'member' => \IPS\Member::loggedIn()->member_id,
|
|
'token' => $args['token']
|
|
) )->decodeJson();
|
|
|
|
if ( $response->httpResponseCode != 200 )
|
|
{
|
|
throw new \DomainException( (string) $response );
|
|
}
|
|
|
|
if ( !$response['remainingDevices'] )
|
|
{
|
|
\IPS\Member::loggedIn()->members_bitoptions['mobile_notifications'] = FALSE;
|
|
\IPS\Member::loggedIn()->save();
|
|
}
|
|
}
|
|
catch ( \Exception $e )
|
|
{
|
|
\IPS\Log::log( $e, 'mobile-push-notifications' );
|
|
}
|
|
}
|
|
|
|
return \IPS\Member::loggedIn();
|
|
}
|
|
}
|