diff --git a/php-api-auth-master/php-api-auth-master/README.md b/authlogin/README.md similarity index 100% rename from php-api-auth-master/php-api-auth-master/README.md rename to authlogin/README.md diff --git a/authlogin/api.php b/authlogin/api.php new file mode 100644 index 0000000..5bab1c5 --- /dev/null +++ b/authlogin/api.php @@ -0,0 +1,36 @@ +'someVeryLongPassPhraseChangeMe', +)); +if ($auth->executeCommand()) exit(0); +if (empty($_SESSION['user']) || !$auth->hasValidCsrfToken()) { + header('HTTP/1.0 401 Unauthorized'); + exit(0); +} +*/ + +// for form+session based authentication (see "login.html"): + +require 'auth.php'; +$auth = new PHP_API_AUTH(array( + 'authenticator'=>function($user,$pass){ if ($user=='admin' && $pass=='admin') $_SESSION['user']=$user; } +)); +if ($auth->executeCommand()) exit(0); +if (empty($_SESSION['user']) || !$auth->hasValidCsrfToken()) { + header('HTTP/1.0 401 Unauthorized'); +exit(0); +} + +// include your api code here: +// +// see: https://github.com/mevdschee/php-crud-api +// +// placeholder for testing: +// echo 'Access granted!'; diff --git a/php-api-auth-master/php-api-auth-master/auth.php b/authlogin/auth.php similarity index 100% rename from php-api-auth-master/php-api-auth-master/auth.php rename to authlogin/auth.php diff --git a/php-api-auth-master/php-api-auth-master/login.html b/authlogin/login.html similarity index 70% rename from php-api-auth-master/php-api-auth-master/login.html rename to authlogin/login.html index 29c9e6b..27e5624 100644 --- a/php-api-auth-master/php-api-auth-master/login.html +++ b/authlogin/login.html @@ -1,4 +1,4 @@ -