ringfinger/backend/classes/controller/UserSessionPostController.php

<?php

declare(strict_types=1);

final class UserSessionPostController extends AbstractController
{
    protected string $route = '/api/v1/user/session';
    protected array $mandatoryAttributes = [
        'username',
        'password',
    ];

    public function handle(): void
    {
        parent::handle();

        if ($this->response->getStatus() !== ServerStatus::OK) {
            return;
        }

        $json = json_decode($this->requestBody);

        $session = new Session();

        if ($session->IsLoggedIn()) {
            $this->response = new ApiJsonResponse(ServerStatus::BAD_REQUEST);
            $this->response->setParameter('success', false);
            $this->response->setMessage('You are already logged in!');

            return;
        }

        if (!$session->Login($json->username, $json->password)) {
            $this->response = new ApiJsonResponse(ServerStatus::UNAUTHORIZED);
            $this->response->setParameter('success', false);
            $this->response->setMessage('Login failed!');

            return;
        }

        $this->response = new ApiJsonResponse();
        $this->response->setParameter('userId', $session->getUserId());
    }
}