Bearer認証に変更

This commit is contained in:
Last2014 2025-08-31 16:14:18 +09:00
parent dcd92e5be1
commit d5e6bd45ef
18 changed files with 564 additions and 634 deletions

View File

@ -34,13 +34,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -49,9 +44,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -34,13 +34,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -49,9 +44,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -25,13 +25,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -40,9 +35,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -26,13 +26,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -41,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -24,13 +24,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if (isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if (!(empty($_GET['token']))) {
$token = safetext($_GET['token']);
} else {
$post_json = json_decode($Get_Post_Json, true);
if (isset($post_json["token"])) {
$token = safetext($post_json["token"]);
} else {
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -39,9 +34,8 @@ if (isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if ($token == "") {
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -24,13 +24,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if (isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if (!(empty($_GET['token']))) {
$token = safetext($_GET['token']);
} else {
$post_json = json_decode($Get_Post_Json, true);
if (isset($post_json["token"])) {
$token = safetext($post_json["token"]);
} else {
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -39,9 +34,8 @@ if (isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if ($token == "") {
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -26,13 +26,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -41,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -33,13 +33,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -48,9 +43,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -25,13 +25,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -40,9 +35,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -25,13 +25,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -40,9 +35,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -26,13 +26,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -41,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -26,13 +26,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -41,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -26,13 +26,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -41,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -26,13 +26,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -41,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -34,13 +34,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -49,9 +44,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -25,15 +25,9 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -42,9 +36,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -34,13 +34,8 @@ try {
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
// トークン取得
if(!(empty($_GET['token']))){
$token = safetext($_GET['token']);
}else{
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
$token = safetext($post_json["token"]);
}else{
$token = getAPIToken();
if($token == "_ERR:INPUT_NOT_FOUND"){
$err = "input_not_found";
$response = array(
'error_code' => $err,
@ -49,9 +44,8 @@ if(isset($_GET['token']) || (!(empty($Get_Post_Json)))) {
echo json_encode($response, JSON_UNESCAPED_UNICODE);
exit;
}
}
if($token == ""){
$err = "input_not_found";
if($token == "_ERR:FORMAT_FIFFERENT"){
$err = "token_invalid";
$response = array(
'error_code' => $err,
'success' => false

View File

@ -3688,4 +3688,37 @@ function getDatasUeuse(PDO $pdo, array $messages): array {
return $messages;
}
function getAPIToken() {
// 従来の方法(body/URLパラメータ)
$Get_Post_Json = file_get_contents("php://input");
if(isset($_GET["token"]) || !empty($Get_Post_Json)) {
if(empty($_GET["token"])){
$post_json = json_decode($Get_Post_Json, true);
if(isset($post_json["token"])){
return safetext($post_json["token"]);
}else{
return "_ERR:INPUT_NOT_FOUND";
}
}else{
return safetext($_GET["token"]);
}
}elseif(empty($_GET["token"])){
return "_ERR:INPUT_NOT_FOUND";
}elseif(empty($_SERVER["HTTP_AUTHORIZATION"])){
return "_ERR:INPUT_NOT_FOUND";
}else{
$token = strstr($_SERVER["HTTP_AUTHORIZATION"],"Bearer ");
if($token == false){
return "_ERR:FORMAT_FIFFERENT";
}else{
$token = str_replace(" ","",$token);
if ($token == "") {
return "_ERR:FORMAT_FIFFERENT";
} else {
return $token;
}
}
}
}
?>