ringfinger/backend/classes/core/AbstractController.php

<?php

declare(strict_types=1);

abstract class AbstractController
{
    protected string $route;
    protected ApiResponse $response;

    protected Session $session;
    protected string $requestUrl;
    protected ?string $requestBody = null;
    protected ?string $contentType = null;
    protected array $mandatoryAttributes = [];

    public function __construct(string $url)
    {
        $this->requestUrl = $url;
        $this->response = new ApiResponse();
        $this->session = new Session();
    }

    public function setRequestBody(string $contentType, string $content): void
    {
        $this->requestBody = $content;
        $this->contentType = $contentType;
    }

    public function getResponse(): ApiResponse
    {
        return $this->response;
    }

    public function handle(): void
    {
        if (!$this->validateJsonBody()) {
            $this->response = new ApiJsonResponse(ServerStatus::BAD_REQUEST);
            $this->response->setParameter('success', false);
            $this->response->setMessage('The request body has not the required json attributes!');
        }
    }

    protected function getUrlParam(string $name): ?string
    {
        foreach (explode('/', $this->route) as $index => $fragment) {
            if ($fragment === '{' . $name . '}') {
                return explode('/', $this->requestUrl)[$index];
            }
        }

        return null;
    }

    protected function getUrlParamInt(string $name): ?int
    {
        $param = $this->getUrlParam($name);

        return $param !== null ? (int)$param : null;
    }

    public function isUserLoggedIn(): bool
	{
		if (!$this->session->IsLoggedIn()) {
			$this->response = new ApiJsonResponse(ServerStatus::UNAUTHORIZED);

			$this->response->setParameter('success', false);
			$this->response->setMessage('You are not logged in!');

			return false;
		}

		return true;
	}

    public function hasUserPermission(int $userId): bool
	{
		$this->response = new ApiJsonResponse();

		$hasPermission = $this->session->isAdmin() || $this->session->getUserId() === $userId;

		if (!$hasPermission) {
			$this->response->setParameter('success', false);
			$this->response->setMessage('You don\'t have the permission to do that!');
			$this->response->setStatus(ServerStatus::UNAUTHORIZED);
		}

		return $hasPermission;
	}

    protected function validateJsonBody(): bool
    {
        if (count($this->mandatoryAttributes) === 0) {
            return true;
        }

        if ($this->contentType === MimeType::JSON && $this->requestBody === null) {
            return false;
        }

        try {
            $json = json_decode($this->requestBody);

            foreach ($this->mandatoryAttributes as $attribute) {
                if (!isset($json->{$attribute})) {
                    return false;
                }
            }

            return true;
        } catch (Throwable $e) {
            return false;
        }
    }
}