i finally committed i guess
Signed-off-by: boris <boris@borishub.co.uk>
This commit is contained in:
33
api/admin.php
Normal file
33
api/admin.php
Normal file
@@ -0,0 +1,33 @@
|
||||
<?php
|
||||
/**
|
||||
* Admin-only API endpoint example
|
||||
*
|
||||
* This endpoint demonstrates how to protect an API route for admin users only
|
||||
* using our simplified authentication approach.
|
||||
*/
|
||||
|
||||
require_once('../Models/User.php');
|
||||
|
||||
// Set content type to JSON
|
||||
header('Content-Type: application/json');
|
||||
|
||||
// Check if user is an admin
|
||||
$auth = User::checkAdmin();
|
||||
if (!$auth) {
|
||||
// The checkAdmin method already sent the error response
|
||||
exit;
|
||||
}
|
||||
|
||||
// User is an admin, proceed with the admin-only logic
|
||||
$response = [
|
||||
'status' => 'success',
|
||||
'message' => 'You have access to this admin-only endpoint',
|
||||
'user' => [
|
||||
'id' => $auth['uid'],
|
||||
'username' => $auth['username'],
|
||||
'accessLevel' => $auth['accessLevel']
|
||||
]
|
||||
];
|
||||
|
||||
// Send response
|
||||
echo json_encode($response);
|
Reference in New Issue
Block a user