create-berna-stencil 2.0.5 → 2.0.7

package/src/backend/api/public/auth/login.php

@@ -1,38 +0,0 @@
-<?php
-declare(strict_types=1);
-
-require_once CORE_PATH . '/modules/Response.php';
-require_once __DIR__ . '/../../../database/models/User.php';
-
-if ($method !== 'POST') {
-    Response::error('Method not allowed', 405);
-}
-
-//
-// Your protected endpoint logic here. You can access route parameters in $requestParams array
-//
-
-$input = json_decode(file_get_contents('php://input'), true) ?? [];
-
-$email    = trim(filter_var($input['email'] ?? '', FILTER_SANITIZE_EMAIL));
-$password = trim($input['password'] ?? '');
-
-if (empty($email) || empty($password)) {
-    Response::error('Missing fields', 400);
-}
-
-if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
-    Response::error('Invalid email', 400);
-}
-
-$user  = new User();
-$found = $user->findByEmail($email);
-
-if (!$found || !password_verify($password, $found['password'])) {
-    Response::error('Invalid credentials', 401);
-}
-
-unset($found['password']);
-Response::success([
-    'user'    => $found,
-]);

package/src/backend/api/public/auth/register.php

@@ -1,44 +0,0 @@
-<?php
-declare(strict_types=1);
-
-require_once CORE_PATH . '/modules/Response.php';
-require_once __DIR__ . '/../../../database/models/User.php';
-
-if ($method !== 'POST') {
-    Response::error('Method not allowed', 405);
-}
-
-//
-// Your protected endpoint logic here. You can access route parameters in $requestParams array
-//
-
-
-$input = json_decode(file_get_contents('php://input'), true) ?? [];
-
-$nickname = htmlspecialchars(strip_tags(trim($input['nickname'] ?? '')));
-$email    = trim(filter_var($input['email'] ?? '', FILTER_SANITIZE_EMAIL));
-$password = trim($input['password'] ?? '');
-
-if (empty($nickname) || empty($email) || empty($password)) {
-    Response::error('Missing fields', 400);
-}
-
-if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
-    Response::error('Invalid email', 400);
-}
-
-if (strlen($password) < 8) {
-    Response::error('Password must be at least 8 characters', 400);
-}
-
-try {
-    $user  = new User();
-    $newId = $user->create($nickname, $email, $password);
-    http_response_code(201);
-    Response::success(['id' => $newId]);
-} catch (PDOException $e) {
-    if ($e->getCode() === '23000') {
-        Response::error('Nickname or email already exists', 409);
-    }
-    Response::error('Database error', 500);
-}

package/src/backend/database/migrations/create_users_table.sql

@@ -1,9 +0,0 @@
-USE example_db;
-
-CREATE TABLE IF NOT EXISTS users (
-    id INT AUTO_INCREMENT PRIMARY KEY,
-    nickname VARCHAR(50) NOT NULL UNIQUE,
-    email VARCHAR(255) NOT NULL UNIQUE,
-    password VARCHAR(255) NOT NULL,
-    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
-) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

package/src/backend/database/models/User.php

@@ -1,61 +0,0 @@
-<?php
-declare(strict_types=1);
-
-require_once __DIR__ . '/../Database.php';
-
-class User {
-    private PDO $db;
-
-    public function __construct() {
-        $this->db = Database::getInstance();
-    }
-
-    public function getAll(): array {
-        return $this->db->query("SELECT id, nickname, email, created_at FROM users")->fetchAll();
-    }
-
-    public function getById(int $id): ?array {
-        $stmt = $this->db->prepare("SELECT id, nickname, email, created_at FROM users WHERE id = :id");
-        $stmt->execute(['id' => $id]);
-        return $stmt->fetch() ?: null;
-    }
-
-    public function findByEmail(string $email): ?array {
-        $stmt = $this->db->prepare("SELECT id, nickname, email, password, created_at FROM users WHERE email = :email");
-        $stmt->execute(['email' => filter_var(trim($email), FILTER_SANITIZE_EMAIL)]);
-        return $stmt->fetch() ?: null;
-    }
-
-    public function create(string $nickname, string $email, string $password = ''): int {
-        $stmt = $this->db->prepare("INSERT INTO users (nickname, email, password) VALUES (:nickname, :email, :password)");
-        $stmt->execute([
-            'nickname' => htmlspecialchars(strip_tags(trim($nickname))),
-            'email'    => filter_var(trim($email), FILTER_SANITIZE_EMAIL),
-            'password' => $password !== '' ? password_hash($password, PASSWORD_BCRYPT) : '',
-        ]);
-        return (int)$this->db->lastInsertId();
-    }
-
-    public function update(int $id, array $data): bool {
-        $fields = [];
-        $params = ['id' => $id];
-
-        if (isset($data['nickname'])) {
-            $fields[] = 'nickname = :nickname';
-            $params['nickname'] = htmlspecialchars(strip_tags($data['nickname']));
-        }
-        if (isset($data['email'])) {
-            $fields[] = 'email = :email';
-            $params['email'] = filter_var($data['email'], FILTER_SANITIZE_EMAIL);
-        }
-
-        if (empty($fields)) return false;
-
-        $sql = "UPDATE users SET " . implode(', ', $fields) . " WHERE id = :id";
-        return $this->db->prepare($sql)->execute($params);
-    }
-
-    public function delete(int $id): bool {
-        return $this->db->prepare("DELETE FROM users WHERE id = :id")->execute(['id' => $id]);
-    }
-}