fix #29 : envoyer le lien magique par email (envoyer_mail_smtp)

2026-05-13 23:41:58 +02:00
commit 8a85c15372
129 changed files with 22818 additions and 0 deletions
@@ -0,0 +1,114 @@
+<?php
+
+// includes/ConfigRepo.php
+declare(strict_types=1);
+
+function config_repo_get(): array
+{
+    $pdo = db();
+    $row = $pdo->query('SELECT * FROM app_config WHERE id=1')->fetch(PDO::FETCH_ASSOC);
+    if (!$row) {
+        return [
+            'allow_password' => true,'allow_oidc' => false,'registrations_open' => true,
+            'oidc_issuer' => null,'oidc_name' => null,'oidc_client_id' => null,'oidc_client_secret' => null,'oidc_redirect_uri' => null
+        ];
+    }
+    return $row;
+}
+
+function config_repo_save(array $in): void
+{
+    $pdo = db();
+    $sql = 'INSERT INTO app_config
+      (id, allow_password, allow_oidc, registrations_open, oidc_issuer, oidc_name, oidc_client_id, oidc_client_secret, oidc_redirect_uri, updated_at)
+      VALUES (1,:pw,:oidc,:open,:iss,:name,:cid,:sec,:redir, now())
+      ON CONFLICT (id) DO UPDATE SET
+        allow_password=:pw, allow_oidc=:oidc, registrations_open=:open,
+        oidc_issuer=:iss, oidc_name=:name, oidc_client_id=:cid, oidc_client_secret=:sec, oidc_redirect_uri=:redir,
+        updated_at=now()';
+    $stmt = $pdo->prepare($sql);
+    $stmt->execute([
+        ':pw'   => (bool)$in['allow_password'],
+        ':oidc' => (bool)$in['allow_oidc'],
+        ':open' => (bool)$in['registrations_open'],
+        ':iss'  => trim((string)($in['oidc_issuer'] ?? '')) ?: null,
+        ':name' => trim((string)($in['oidc_name'] ?? '')) ?: null,
+        ':cid'  => trim((string)($in['oidc_client_id'] ?? '')) ?: null,
+        ':sec'  => trim((string)($in['oidc_client_secret'] ?? '')) ?: null,
+        ':redir' => trim((string)($in['oidc_redirect_uri'] ?? '')) ?: null,
+    ]);
+}
+
+/**
+ * Met à jour le fichier .env en conservant les autres lignes.
+ * $pairs = ['KEY'=>'value', ...] ; value null => supprime la clé.
+ */
+function env_set_pairs(string $envPath, array $pairs): void
+{
+    if (!is_file($envPath)) {
+        file_put_contents($envPath, '');
+    }
+    $lines = file($envPath, FILE_IGNORE_NEW_LINES);
+    $map   = [];
+    foreach ($lines as $i => $line) {
+        if (preg_match('/^\s*#/', $line) || trim($line) === '') {
+            $map[$i] = $line;
+            continue;
+        }
+        if (!str_contains($line, '=')) {
+            $map[$i] = $line;
+            continue;
+        }
+        [$k,$v] = explode('=', $line, 2);
+        $k = trim($k);
+        if ($k === '') {
+            $map[$i] = $line;
+            continue;
+        }
+        if (array_key_exists($k, $pairs)) {
+            if ($pairs[$k] === null) {
+                $map[$i] = null;
+            } // supprimé
+            else {
+                $map[$i] = $k.'='.env_quote((string)$pairs[$k]);
+            }
+            unset($pairs[$k]);
+        } else {
+            $map[$i] = $line;
+        }
+    }
+    // append keys restantes
+    foreach ($pairs as $k => $v) {
+        if ($v === null) {
+            continue;
+        }
+        $map[] = $k.'='.env_quote((string)$v);
+    }
+    // re-écriture
+    $out = [];
+    foreach ($map as $line) {
+        if ($line === null) {
+            continue;
+        } $out[] = $line;
+    }
+    file_put_contents($envPath, implode(PHP_EOL, $out).PHP_EOL);
+}
+
+function env_quote(string $v): string
+{
+    if ($v === '' || preg_match('/\s|[#"\'=]/', $v)) {
+        // met entre guillemets et échappe
+        $v = str_replace(['\\','"'], ['\\\\','\\"'], $v);
+        return "\"$v\"";
+    }
+    return $v;
+}
+
+function ensure_admin(): void
+{
+    // adapte à ton système
+    if (empty($_SESSION['user']['is_admin'])) {
+        http_response_code(403);
+        exit('Forbidden');
+    }
+}