feat: dist/ pridan do repa pro server deploy

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 09:19:40 +01:00
parent 1d27d19157
commit b2a2937a35
119 changed files with 15628 additions and 1 deletions
--- a/dist/api/admin/sessions.php
+++ b/dist/api/admin/sessions.php
@@ -0,0 +1,67 @@
+<?php
+
+/**
+ * BOHA Automation - Sessions API
+ *
+ * Allows users to view and manage their active sessions (logged-in devices)
+ *
+ * GET    /api/admin/sessions.php              - List all active sessions for current user
+ * DELETE /api/admin/sessions.php?id=X         - Delete a specific session
+ * DELETE /api/admin/sessions.php?action=all   - Delete all sessions except current
+ */
+
+declare(strict_types=1);
+
+require_once dirname(__DIR__) . '/config.php';
+require_once dirname(__DIR__) . '/includes/JWTAuth.php';
+require_once __DIR__ . '/handlers/sessions-handlers.php';
+
+// Set headers
+setCorsHeaders();
+setSecurityHeaders();
+setNoCacheHeaders();
+header('Content-Type: application/json; charset=utf-8');
+
+// Require authentication
+$authData = JWTAuth::requireAuth();
+
+$method = $_SERVER['REQUEST_METHOD'];
+$sessionId = isset($_GET['id']) ? (int) $_GET['id'] : null;
+$action = $_GET['action'] ?? null;
+$currentUserId = $authData['user_id'];
+
+// Get current refresh token hash for identifying current session
+$currentTokenHash = null;
+if (isset($_COOKIE['refresh_token'])) {
+    $currentTokenHash = hash('sha256', $_COOKIE['refresh_token']);
+}
+
+try {
+    $pdo = db();
+
+    switch ($method) {
+        case 'GET':
+            handleGetSession($pdo, $currentUserId, $currentTokenHash);
+            break;
+
+        case 'DELETE':
+            if ($action === 'all') {
+                handleDeleteAllSessions($pdo, $currentUserId, $currentTokenHash);
+            } elseif ($sessionId) {
+                handleDeleteSession($pdo, $sessionId, $currentUserId, $currentTokenHash);
+            } else {
+                errorResponse('ID relace nebo akce je povinná');
+            }
+            break;
+
+        default:
+            errorResponse('Metoda není povolena', 405);
+    }
+} catch (PDOException $e) {
+    error_log('Sessions API error: ' . $e->getMessage());
+    if (DEBUG_MODE) {
+        errorResponse('Chyba databáze: ' . $e->getMessage(), 500);
+    } else {
+        errorResponse('Chyba databáze', 500);
+    }
+}