FEAT Logout + more info in cookie + auth control for non standard users

rest/index.php

@@ -48,6 +48,7 @@ $app->add(function (\Slim\Http\Request $request, \Slim\Http\Response $response,
 
 //Authentication
 $app->post('/log', \SrcCore\controllers\AuthenticationController::class . ':log');
+$app->get('/logout', \SrcCore\controllers\AuthenticationController::class . ':logout');
 
 //Attachments
 $app->get('/attachments/{id}', \Attachment\controllers\AttachmentController::class . ':getById');

src/core/controllers/AuthenticationController.php

@@ -54,10 +54,20 @@ class AuthenticationController
             return $response->withStatus(401)->withJson(['errors' => 'Authentication Failed']);
         }
 
-        AuthenticationModel::setCookieAuth(['email' => $data['email']]);
+        $user = UserModel::getByEmail(['email' => $data['email'], 'select' => ['id', 'email', 'firstname', 'lastname', 'mode']]);
+        if ($user['mode'] != 'standard') {
+            return $response->withStatus(403)->withJson(['errors' => 'Login unauthorized']);
+        }
 
-        $user = UserModel::getByEmail(['email' => $data['email'], 'select' => ['id', 'email', 'firstname', 'lastname']]);
+        AuthenticationModel::setCookieAuth(['email' => $data['email']]);
 
         return $response->withJson(['user' => $user]);
     }
+
+    public static function logout(Request $request, Response $response)
+    {
+        AuthenticationModel::deleteCookieAuth();
+
+        return $response->withJson(['success' => 'success']);
+    }
 }

src/core/models/AuthenticationModel.php

@@ -87,7 +87,7 @@ class AuthenticationModel
         }
 
         $user = UserModel::get([
-            'select'    => ['cookie_key'],
+            'select'    => ['id', 'cookie_key', 'firstname', 'lastname'],
             'where'     => ['email = ?', 'cookie_date > CURRENT_TIMESTAMP'],
             'data'      => [$args['email']]
         ]);
@@ -110,8 +110,14 @@ class AuthenticationModel
             'data'  => [$args['email']]
         ]);
 
-        $cookieData = json_encode(['email' => $args['email'], 'cookieKey' => $cookieKey]);
-        setcookie('maarchParapheurAuth', base64_encode($cookieData), $cookieTime, $cookiePath, '', false, true);
+        $cookieData = json_encode([
+            'id'        => $user[0]['id'],
+            'email'     => $args['email'],
+            'firstname' => $user[0]['firstname'],
+            'lastname'  => $user[0]['lastname'],
+            'cookieKey' => $cookieKey
+        ]);
+        setcookie('maarchParapheurAuth', base64_encode($cookieData), $cookieTime, $cookiePath, '', false, false);
 
         return true;
     }