WIP Preorder 2022-09-14

application/Api/v1/AddressdbApicontroller.php

@@ -1,6 +1,7 @@
 <?php
 
 class AddressdbApicontroller extends mfBaseApicontroller {
+  private $filter_gemeinde_ids = [];
   
   protected function init() {
     $db = $this->db(ADDRESSDB_DBHOST, ADDRESSDB_DBUSER, ADDRESSDB_DBPASS, ADDRESSDB_DBNAME);
@@ -9,6 +10,24 @@ class AddressdbApicontroller extends mfBaseApicontroller {
     $this->addRoute("/addressdb/findStreet", "findStreet", "POST");
     $this->addRoute("/addressdb/findZip", "findZip", "POST");
     $this->addRoute("/addressdb/findCity", "findCity", "POST");
+    
+    $this->allowMissingOrigin = false;
+  }
+  
+  protected function authenticated() {
+    $campaignApiuser = PreordercampaignApiuserModel::getFirst(["worker_id" => $this->me->id]);
+    $campaign = new Preordercampaign($campaignApiuser->preordercampaign_id);
+    if($campaign) {
+      foreach(PreordercampaignGemeindeModel::search(['preordercampaign_id' => $campaign->id]) as $gemeinde) {
+        $this->filter_gemeinde_ids[] = $gemeinde->id;
+      }
+    }
+    
+    foreach(PreordercampaignOriginhostnameModel::search(['preordercampaign_id' => $campaign->id]) as $origin) {
+      $this->addAllowedOrigin($origin->hostname);
+    }
+    
+    //var_dump($campaign, $this->allowed_origins);exit;
   }
   
   protected function findCity() {

application/Api/v1/PreorderApicontroller.php

@@ -0,0 +1,157 @@
+<?php
+
+class PreorderApicontroller extends mfBaseApicontroller {
+  private $filter_gemeinde_ids = [];
+  private $campaign;
+  
+  
+  protected function init() {
+    $db = $this->db(ADDRESSDB_DBHOST, ADDRESSDB_DBUSER, ADDRESSDB_DBPASS, ADDRESSDB_DBNAME);
+    
+    $this->addRoute("/preorder", "submitPreorder", "POST");
+    
+    $this->allowMissingOrigin = false;
+  }
+  
+  protected function authenticated() {
+    $campaignApiuser = PreordercampaignApiuserModel::getFirst(["worker_id" => $this->me->id]);
+    $campaign = new Preordercampaign($campaignApiuser->preordercampaign_id);
+    if($campaign) {
+      $this->campaign = $campaign;
+      foreach(PreordercampaignGemeindeModel::search(['preordercampaign_id' => $campaign->id]) as $gemeinde) {
+        $this->filter_gemeinde_ids[] = $gemeinde->id;
+      }
+    }
+    
+    foreach(PreordercampaignOriginhostnameModel::search(['preordercampaign_id' => $campaign->id]) as $origin) {
+      $this->addAllowedOrigin($origin->hostname);
+    }
+    
+    //var_dump($campaign, $this->allowed_origins);exit;
+  }
+  
+  protected function submitPreorder() {
+    if(!$this->campaign) {
+      $this->log->debug("disallowed request because no campaign for apikey");
+      return mfResponse::Forbidden();
+    }
+    
+    $type = $this->post['type'];
+    if($type != "provision" && $type != "order") {
+      return mfResponse::BadRequest(["message" => "Unknown type"]);
+    }
+    
+    if(!array_key_exists("address", $this->post)) {
+      return mfResponse::BadRequest(['message' => "address missing"]);
+    }
+    
+    if(!array_key_exists("customer", $this->post)) {
+      return mfResponse::BadRequest(['message' => "customer data missing"]);
+    }
+    
+    // check address
+    if(!property_exists($this->post['address'],"street") ||
+       !property_exists($this->post['address'],"housenumber") ||
+       !property_exists($this->post['address'],"zip") ||
+       !property_exists($this->post['address'],"city")
+    ) {
+      return mfResponse::BadRequest(['message' => "Mandatory address fields missing"]);
+    }
+    
+    $address_search = [];
+    foreach(['street' => 'strasse','housenumber' => "hausnummer",'zip' => "plz",'city' => "ortschaft"] as $key => $field_name) {
+      if(property_exists($this->post['address'], $key)) {
+        $address_search[$field_name] = trim($this->post['address']->$key);
+      }
+    }
+    
+    $unit_search = [];
+    foreach(['block','stiege','stock','tuer'] as $key) {
+      if(property_exists($this->post['address'], $key) && trim($this->post['address']->key)) {
+        $unit_search[$key] = trim($this->post['address']->$key);
+      }
+    }
+    
+    // check customer
+    
+    $customer = $this->post['customer'];
+    
+    if(!property_exists($customer,"firstname") ||
+       !property_exists($customer,"lastname") ||
+       !property_exists($customer,"street") ||
+       !property_exists($customer,"zip") ||
+       !property_exists($customer,"city")
+    ) {
+      return mfResponse::BadRequest(['message' => "Mandatory customer fields missing"]);
+    }
+    
+    
+    // search address in AddressDB
+    
+    foreach($address_search as $field => $value) {
+      $where .= " AND `$field` = '$value'";
+    }
+    
+    $sql = "SELECT * FROM view_hausnummer WHERE 1=1 $where";
+    $res = $this->db()->query($sql);
+    if(!$this->db()->num_rows($res)) {
+      //var_dump($this->db()->num_rows($res), $this->db()->fetch_object($res));
+      return mfResponse::NotFound(['message' => "Adresse nicht gefunden"]);
+    }
+    
+    $address = $this->db()->fetch_object($res);
+    
+    
+    
+    
+    // search wohneinheit
+    $unit = false;
+    if(count($unit_search)) {
+      foreach($unit_search as $field => $value) {
+        if($field == "stock" || $field == "stiege") continue; // only check for block and tuer
+        $where .= " AND `$field` = '$value'";
+      }
+      
+      $sql = "SELECT * FROM view_wohneinheit WHERE 1=1 $where AND hausnummer_id=".$address->hausnummer_id;
+      $res = $this->db()->query($sql);
+      if(!$this->db()->num_rows($res)) {
+        return mfResponse::NotFound(['message' => "Wohneinheit nicht gefunden"]);
+      }
+      
+      $unit = $this->db()->fetch_object($res);
+      //var_dump($this->db()->num_rows($res), $this->db()->fetch_object($res));
+      
+    }
+    
+    $preorder_data = [];
+    $preorder_data['preordercampaign_id'] = $this->campaign->id;
+    $preorder_data['type'] = $type;
+    $preorder_data['adb_hausnummer_id'] = $address->hausnummer_id;
+    
+    if($unit) {
+      $preorder_data['adb_wohneinheit_id'] = $unit->wohneinheit_id;
+    }
+    
+    if($type == "provision") {
+      $product = $this->campaign->setup_products['provision'][0];
+      if($product) {
+        $preorder_data['setup_product_id'] = $product->id;
+        $preorder_data['price_setup'] = $product->price_setup;
+      }
+    }
+    
+    
+    
+    foreach(['company','uid','firstname','lastname','street','zip','city','phone','email'] as $key) {
+      if(property_exists($customer, $key)) {
+        $preorder_data[$key] = $customer->$key;
+      }
+    }
+    
+    var_dump($preorder_data);exit;
+    
+    
+    var_dump($this->post);exit;
+  }
+  
+}