537 lines
16 KiB
PHP
Executable File
537 lines
16 KiB
PHP
Executable File
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace ServerManager\Controllers;
|
|
|
|
use ServerManager\Core\App;
|
|
use ServerManager\Core\Session;
|
|
use ServerManager\Models\Server;
|
|
use ServerManager\Models\User;
|
|
use ServerManager\Services\MonitoringService;
|
|
use ServerManager\Services\SSHService;
|
|
use ServerManager\Services\AuditService;
|
|
use ServerManager\Models\CommandHistory;
|
|
use ServerManager\Core\Validator;
|
|
|
|
class ApiController
|
|
{
|
|
private \ServerManager\Core\View $view;
|
|
|
|
public function __construct()
|
|
{
|
|
$this->view = App::getInstance()->getView();
|
|
}
|
|
|
|
private function authenticateRequest(): ?array
|
|
{
|
|
$token = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
|
|
$token = str_replace('Bearer ', '', $token);
|
|
|
|
if (empty($token) && isset($_GET['api_token'])) {
|
|
$token = $_GET['api_token'];
|
|
}
|
|
|
|
if (empty($token)) {
|
|
$this->view->json(['error' => 'API token is required'], 401);
|
|
}
|
|
|
|
$userModel = new User();
|
|
$user = $userModel->findByApiToken($token);
|
|
|
|
if (!$user) {
|
|
$this->view->json(['error' => 'Invalid API token'], 401);
|
|
}
|
|
|
|
return $user;
|
|
}
|
|
|
|
public function status(): void
|
|
{
|
|
$this->authenticateRequest();
|
|
|
|
$monitoringService = new MonitoringService();
|
|
$stats = $monitoringService->getDashboardStats();
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'application' => 'ServerManager',
|
|
'version' => '1.0.0',
|
|
'stats' => $stats,
|
|
'timestamp' => date('c'),
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function servers(): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$serverModel = new Server();
|
|
$page = (int) ($_GET['page'] ?? 1);
|
|
$perPage = (int) ($_GET['per_page'] ?? 20);
|
|
$search = $_GET['search'] ?? '';
|
|
|
|
$filters = [];
|
|
if ($search) $filters['search'] = $search;
|
|
|
|
$accessibleIds = $serverModel->getAccessibleServerIds((int) $user['id']);
|
|
$filters['accessible_ids'] = !empty($accessibleIds) ? $accessibleIds : [-1];
|
|
|
|
$servers = $serverModel->getAll($page, $perPage, $filters);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => $servers['data'],
|
|
'pagination' => [
|
|
'page' => $servers['page'],
|
|
'per_page' => $servers['per_page'],
|
|
'total' => $servers['total'],
|
|
'total_pages' => $servers['total_pages'],
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function serverDetail(int $id): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$serverModel = new Server();
|
|
$server = $serverModel->findById($id);
|
|
|
|
if (!$server) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
if (!$serverModel->canView($id, (int) $user['id'])) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
$monitoringService = new MonitoringService();
|
|
$metrics = $monitoringService->getLatestMetrics($id);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'server' => $server,
|
|
'metrics' => $metrics,
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function serverAdd(): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$input = json_decode(file_get_contents('php://input'), true) ?? $_POST;
|
|
|
|
$validator = new Validator();
|
|
$rules = [
|
|
'name' => 'required|min:2|max:100',
|
|
'ip_address' => 'required',
|
|
'ssh_port' => 'required|numeric|port',
|
|
'ssh_user' => 'required|min:2|max:50',
|
|
];
|
|
|
|
if (!$validator->validate($input, $rules)) {
|
|
$this->view->json(['error' => $validator->getFirstError()], 400);
|
|
}
|
|
|
|
$serverModel = new Server();
|
|
$id = $serverModel->create($input);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'message' => 'Server created successfully.',
|
|
'server_id' => $id,
|
|
], 201);
|
|
}
|
|
|
|
public function serverUpdate(int $id): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$input = json_decode(file_get_contents('php://input'), true) ?? $_POST;
|
|
|
|
$serverModel = new Server();
|
|
$server = $serverModel->findById($id);
|
|
|
|
if (!$server) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
if (!$serverModel->canManage($id, (int) $user['id'])) {
|
|
$this->view->json(['error' => 'Forbidden'], 403);
|
|
}
|
|
|
|
$serverModel->update($id, $input);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'message' => 'Server updated successfully.',
|
|
]);
|
|
}
|
|
|
|
public function serverDelete(int $id): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$serverModel = new Server();
|
|
$server = $serverModel->findById($id);
|
|
|
|
if (!$server) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
if (!$serverModel->canManage($id, (int) $user['id'])) {
|
|
$this->view->json(['error' => 'Forbidden'], 403);
|
|
}
|
|
|
|
$serverModel->delete($id);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'message' => 'Server deleted successfully.',
|
|
]);
|
|
}
|
|
|
|
public function serverMetrics(int $id): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$serverModel = new Server();
|
|
if (!$serverModel->canView($id, (int) $user['id'])) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
$monitoringService = new MonitoringService();
|
|
|
|
$hours = (int) ($_GET['hours'] ?? 24);
|
|
if ($hours > 168) $hours = 168;
|
|
|
|
$metrics = $monitoringService->getHistoricalMetrics($id, $hours);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => $metrics,
|
|
]);
|
|
}
|
|
|
|
public function executeCommand(int $id): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$serverModel = new Server();
|
|
if (!$serverModel->canView($id, (int) $user['id'])) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
$input = json_decode(file_get_contents('php://input'), true) ?? $_POST;
|
|
$command = $input['command'] ?? '';
|
|
|
|
if (empty($command)) {
|
|
$this->view->json(['error' => 'Command is required'], 400);
|
|
}
|
|
|
|
$serverModel = new Server();
|
|
$server = $serverModel->findById($id);
|
|
|
|
if (!$server) {
|
|
$this->view->json(['error' => 'Server not found'], 404);
|
|
}
|
|
|
|
try {
|
|
$ssh = new SSHService();
|
|
if (!$ssh->connect($server)) {
|
|
throw new \RuntimeException('Could not establish SSH connection');
|
|
}
|
|
$result = $ssh->exec($command);
|
|
$ssh->disconnect();
|
|
|
|
$commandHistory = new CommandHistory();
|
|
$commandHistory->log(
|
|
$id,
|
|
$user['id'],
|
|
$command,
|
|
$result['output'],
|
|
$result['exit_status'] ?? 0
|
|
);
|
|
|
|
$auditService = new AuditService();
|
|
$auditService->logServerAction($id, 'api_command_executed', $command);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'output' => $result['output'],
|
|
'exit_status' => $result['exit_status'],
|
|
'stderr' => $result['stderr'],
|
|
],
|
|
]);
|
|
} catch (\Throwable $e) {
|
|
$this->view->json([
|
|
'error' => 'Command execution failed: ' . $e->getMessage(),
|
|
], 500);
|
|
}
|
|
}
|
|
|
|
public function users(): void
|
|
{
|
|
$currentUser = $this->authenticateRequest();
|
|
|
|
if ($currentUser['role'] !== 'super_admin' && $currentUser['role'] !== 'admin') {
|
|
$this->view->json(['error' => 'Forbidden'], 403);
|
|
}
|
|
|
|
$userModel = new User();
|
|
$users = $userModel->getAll(1, 100);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => $users['data'],
|
|
]);
|
|
}
|
|
|
|
public function refreshAllMetrics(): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$monitoringService = new MonitoringService();
|
|
$results = $monitoringService->collectAllMetrics();
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => $results,
|
|
]);
|
|
}
|
|
|
|
public function register(): void
|
|
{
|
|
$input = json_decode(file_get_contents('php://input'), true) ?? $_POST;
|
|
|
|
$validator = new Validator();
|
|
$rules = [
|
|
'username' => 'required|min:3|max:50',
|
|
'email' => 'required|email',
|
|
'password' => 'required|min:8',
|
|
'confirm_password' => 'required',
|
|
];
|
|
|
|
if (!$validator->validate($input, $rules)) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => $validator->getFirstError(),
|
|
], 400);
|
|
return;
|
|
}
|
|
|
|
if ($input['password'] !== $input['confirm_password']) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'Passwords do not match.',
|
|
], 400);
|
|
return;
|
|
}
|
|
|
|
$userModel = new User();
|
|
|
|
$existing = $userModel->findByUsername($input['username']);
|
|
if ($existing) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'Username is already taken.',
|
|
], 409);
|
|
return;
|
|
}
|
|
|
|
$existingEmail = $userModel->findByEmail($input['email']);
|
|
if ($existingEmail) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'Email is already registered.',
|
|
], 409);
|
|
return;
|
|
}
|
|
|
|
$userId = $userModel->create([
|
|
'username' => $input['username'],
|
|
'email' => $input['email'],
|
|
'password' => $input['password'],
|
|
'role' => 'admin',
|
|
'is_active' => 1,
|
|
]);
|
|
|
|
$user = $userModel->findById($userId);
|
|
|
|
$auditService = new AuditService();
|
|
$auditService->log('user_registered', 'User registered via API', $userId);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'token' => $user['api_token'],
|
|
'user' => [
|
|
'id' => (int) $user['id'],
|
|
'username' => $user['username'],
|
|
'email' => $user['email'],
|
|
'role' => $user['role'],
|
|
],
|
|
],
|
|
], 201);
|
|
}
|
|
|
|
public function profile(): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'id' => (int) $user['id'],
|
|
'username' => $user['username'],
|
|
'email' => $user['email'],
|
|
'role' => $user['role'],
|
|
'created_at' => $user['created_at'],
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function updateProfile(): void
|
|
{
|
|
$user = $this->authenticateRequest();
|
|
|
|
$input = json_decode(file_get_contents('php://input'), true) ?? $_POST;
|
|
|
|
$validator = new Validator();
|
|
$rules = [
|
|
'email' => 'required|email',
|
|
];
|
|
|
|
if (!$validator->validate($input, $rules)) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => $validator->getFirstError(),
|
|
], 400);
|
|
return;
|
|
}
|
|
|
|
$updateData = ['email' => $input['email']];
|
|
|
|
if (!empty($input['new_password'])) {
|
|
if (strlen($input['new_password']) < 8) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'New password must be at least 8 characters.',
|
|
], 400);
|
|
return;
|
|
}
|
|
if (empty($input['current_password'])) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'Current password is required to set a new password.',
|
|
], 400);
|
|
return;
|
|
}
|
|
if ($input['new_password'] !== ($input['confirm_password'] ?? '')) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'New passwords do not match.',
|
|
], 400);
|
|
return;
|
|
}
|
|
|
|
$userModel = new User();
|
|
$fullUser = $userModel->findById((int) $user['id']);
|
|
if (!$fullUser || !(new \ServerManager\Core\Security())->verifyPassword($input['current_password'], $fullUser['password_hash'])) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'Current password is incorrect.',
|
|
], 403);
|
|
return;
|
|
}
|
|
|
|
$updateData['password'] = $input['new_password'];
|
|
}
|
|
|
|
$userModel = new User();
|
|
$userModel->update((int) $user['id'], $updateData);
|
|
|
|
$auditService = new AuditService();
|
|
$auditService->log('profile_updated', 'Profile updated via API', (int) $user['id']);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'message' => 'Profile updated successfully.',
|
|
]);
|
|
}
|
|
|
|
public function appVersion(): void
|
|
{
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'version' => '1.0.1',
|
|
'apk_url' => '/sysadmin.apk',
|
|
'force_update' => false,
|
|
'release_notes' => '• Gráficos de métricas en tiempo real\n• Nuevo diseño con animaciones\n• Modo oscuro\n• Perfil de usuario\n• Mejoras de rendimiento',
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function login(): void
|
|
{
|
|
$input = json_decode(file_get_contents('php://input'), true) ?? $_POST;
|
|
|
|
$validator = new Validator();
|
|
$rules = [
|
|
'username' => 'required',
|
|
'password' => 'required|min:6',
|
|
];
|
|
|
|
if (!$validator->validate($input, $rules)) {
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => $validator->getFirstError(),
|
|
], 400);
|
|
return;
|
|
}
|
|
|
|
$userModel = new User();
|
|
$user = $userModel->authenticate($input['username'], $input['password']);
|
|
|
|
if (!$user) {
|
|
$auditService = new AuditService();
|
|
$auditService->logLogin($input['username'], false, 'Invalid credentials');
|
|
$this->view->json([
|
|
'success' => false,
|
|
'error' => 'Invalid username or password.',
|
|
], 401);
|
|
return;
|
|
}
|
|
|
|
$token = $user['api_token'];
|
|
if (empty($token)) {
|
|
$security = new \ServerManager\Core\Security();
|
|
$token = $security->generateApiToken();
|
|
$userModel->update((int) $user['id'], ['api_token' => $token]);
|
|
}
|
|
|
|
$auditService = new AuditService();
|
|
$auditService->logLogin($input['username'], true);
|
|
|
|
$this->view->json([
|
|
'success' => true,
|
|
'data' => [
|
|
'token' => $token,
|
|
'user' => [
|
|
'id' => (int) $user['id'],
|
|
'username' => $user['username'],
|
|
'email' => $user['email'],
|
|
'role' => $user['role'],
|
|
],
|
|
],
|
|
]);
|
|
}
|
|
}
|