WebSVN – LeadersLinked - Services – Diff – /module/LeadersLinked/src/Module.php

 <?php
-declare(strict_types=1);
+declare(strict_types = 1);
 namespace LeadersLinked;
 use Laminas\Db\Adapter\AdapterInterface;
 use Laminas\ModuleManager\ModuleEvent;
 use LeadersLinked\Mapper\CompanyUserMapper;
 use LeadersLinked\Model\CompanyUser;
 use LeadersLinked\Mapper\CompanyMapper;
 use LeadersLinked\Mapper\CompanyServiceMapper;
 use LeadersLinked\Model\Service;
 use LeadersLinked\Library\Functions;
 use LeadersLinked\Mapper\DailyPulseMapper;
 use LeadersLinked\Model\DailyPulse;
 use LeadersLinked\Mapper\OrganizationPositionMapper;
 use LeadersLinked\Mapper\KnowledgeAreaCategoryJobDescriptionMapper;
 use LeadersLinked\Mapper\JwtTokenMapper;
 use LeadersLinked\Authentication\AuthUserIdAdapter;
 use LeadersLinked\Model\JwtToken;
 use Laminas\Http\Response;
 class Module
+{
-{
     /**
+     *
      * @var Acl
      */
     private $acl;
     /**
+     *
      * @var AdapterInterface
      */
     private $adapter;
     /**
+     *
      * @var CurrentUserPlugin
      */
     private $currentUserPlugin;
     /**
+     *
      * @var CurrentNetworkPlugin
      */
     private $currentNetworkPlugin;
     /**
+     *
      * @var array
      */
     private $routesAuthorized = [];
     /**
+     *
      * @var boolean
      */
     private $authByOTP = false;
     /**
+     *
      * @var boolean
      */
     private $authByJWT = false;
     /**
+     *
      * @var int
-     */
-    private $jwtID = 0;
+     */
     private $jwtID = 0;
     /**
+     *
      * @var JwtToken
-     */
-    private  $jwtToken;
+     */
     private $jwtToken;
     /**
+     *
      * @var array
-     */
-    private $config;
+     */
     private $config;
-    public function init(ModuleManager $moduleManager)
-    {
     public function init(ModuleManager $moduleManager)
+    {
+        $events = $moduleManager->getEventManager();
+        $events->attach(ModuleEvent::EVENT_MERGE_CONFIG, array(
+            $this,
-        $events = $moduleManager->getEventManager();
+            'onMergeConfig'
-        $events->attach(ModuleEvent::EVENT_MERGE_CONFIG, array($this, 'onMergeConfig'));
+        ));
+    }
     public function onMergeConfig(ModuleEvent $event)
     {
         $configListener = $event->getConfigListener();
-        $this->config   = $configListener->getMergedConfig(false);
+        $this->config = $configListener->getMergedConfig(false);
         $reader = new Ini();
         $data = $reader->fromFile('config/leaderslinked.ini');
-        $prefix = 'leaderslinked';
-        foreach($data as $section => $pairs)
+        $prefix = 'leaderslinked';
-        {
-            foreach($pairs as $key => $value)
+        foreach ($data as $section => $pairs) {
             foreach ($pairs as $key => $value) {
                 $this->config[$prefix . '.' . $section . '.' . $key] = $value;
+            }
+        }
-        $configListener->setMergedConfig($this->config);
-    }
+        $configListener->setMergedConfig($this->config);
+    }
-    public function getConfig() : array
+    public function getConfig(): array
+    {
         return include __DIR__ . '/../config/module.config.php';
+    }
     public function onBootstrap(MvcEvent $event)
     public function onBootstrap(MvcEvent $event)
         $timezone = $this->config['leaderslinked.runmode.timezone'];
-        date_default_timezone_set($timezone);
+        $timezone = $this->config['leaderslinked.runmode.timezone'];
         date_default_timezone_set($timezone);
-        header('Access-Control-Allow-Origin: *');
-        header('Access-Control-Allow-Headers: *');
+        header('Access-Control-Allow-Origin: *');
-        header('Access-Control-Allow-Method: POST, GET, HEAD, OPTIONS');
+        header('Access-Control-Allow-Headers: *');
-        header('Access-Control-Max-Age: 86400');
+        header('Access-Control-Allow-Method: POST, GET, HEAD, OPTIONS');
+        header('Access-Control-Max-Age: 86400');
-        $response = $event->getResponse();
-        Functions::addCrossSiteToResponse($response);
+        $response = $event->getResponse();
-        $event->setResponse($response);
+        Functions::addCrossSiteToResponse($response);
+        $event->setResponse($response);
+        $serviceManager = $event->getApplication()->getServiceManager();
-        $serviceManager = $event->getApplication()->getServiceManager();
+        $eventManager = $event->getApplication()->getEventManager();
+        $eventManager->attach(MvcEvent::EVENT_DISPATCH_ERROR, [
+            $this,
+            'onDispatchError'
+        ], 0);
         $eventManager->attach(MvcEvent::EVENT_RENDER_ERROR, [
-        $eventManager = $event->getApplication()->getEventManager();
+            $this,
-        $eventManager->attach(MvcEvent::EVENT_DISPATCH_ERROR, [$this,'onDispatchError'], 0);
+            'onRenderError'
-        $eventManager->attach(MvcEvent::EVENT_RENDER_ERROR, [$this,'onRenderError'], 0);
+        ], 0);
         $adapter = $serviceManager->get('leaders-linked-db');
         /*
-        $session = $serviceManager->get('leaders-linked-session');
-        $session->start();
-        $session->regenerateId(true);
+         * $session = $serviceManager->get('leaders-linked-session');
-*/
-        $translator = $serviceManager->get('MvcTranslator');
+         * $session->start();
-        $translator->addTranslationFile(
+         * $session->regenerateId(true);
-            'phpArray',
-            __DIR__ . '/i18n/validate.php',
-            'default'
-            );
-        $translator->addTranslationFile(
-            'phpArray',
-            __DIR__ . '/i18n/spanish.php',
-            'default'
+         */
             );
+        $translator = $serviceManager->get('MvcTranslator');
+        $translator->addTranslationFile('phpArray', __DIR__ . '/i18n/validate.php', 'default');
         $translator->addTranslationFile('phpArray', __DIR__ . '/i18n/spanish.php', 'default');
         \Laminas\Validator\AbstractValidator::setDefaultTranslator($translator);
         \Laminas\Validator\AbstractValidator::setDefaultTranslator($translator);
-        $headers  = $event->getRequest()->getHeaders();
+        $headers = $event->getRequest()->getHeaders();
-        if($headers->has('token')) {
+        if ($headers->has('token')) {
             $device_uuid = Functions::sanitizeFilterString($headers->get('token')->getFieldValue());
         } else {
             $device_uuid = '';
         }
-        if($headers->has('secret')) {
+        if ($headers->has('secret')) {
-            $password =  Functions::sanitizeFilterString($headers->get('secret')->getFieldValue());
+            $password = Functions::sanitizeFilterString($headers->get('secret')->getFieldValue());
         } else {
             $password = '';
         }
-        if($headers->has('rand')) {
+        if ($headers->has('rand')) {
-            $rand =  Functions::sanitizeFilterString($headers->get('rand')->getFieldValue());
+            $rand = Functions::sanitizeFilterString($headers->get('rand')->getFieldValue());
         } else {
             $rand = 0;
-        }
-        if($headers->has('created')) {
             $timestamp =  Functions::sanitizeFilterString($headers->get('created')->getFieldValue());
-        } else {
+        if ($headers->has('created')) {
-            $timestamp = 0;
+            $timestamp = Functions::sanitizeFilterString($headers->get('created')->getFieldValue());
         } else {
+            $timestamp = 0;
+        }
         $this->currentNetworkPlugin = CurrentNetworkPlugin::getInstance($adapter);
-        if(!$this->currentNetworkPlugin->hasNetwork()) {
+        if (! $this->currentNetworkPlugin->hasNetwork()) {
             $this->currentNetworkPlugin->fetchDefaultNetwork();
+        }
+        if (! $this->currentNetworkPlugin->hasNetwork()) {
+            $this->fetchDefaultNetwork();
-        if(!$this->currentNetworkPlugin->hasNetwork()) {
+            $response = $event->getResponse();
-            $this->fetchDefaultNetwork();
+            $code = 200;
+            $content = json_encode([
-            $response = $event->getResponse();
+                'success' => false,
-            $code = 200;
+                'data' => '200 Unauthorized - Private network - not found',
-            $content = json_encode(['success' => false, 'data' => '200 Unauthorized - Private network - not found', 'fatal' => true]);
+                'fatal' => true
-            $this->sendResponse($response, $code, $content);
+            ]);
+            $this->sendResponse($response, $code, $content);
+        }
+        if ($this->currentNetworkPlugin->getNetwork()->status == Network::STATUS_INACTIVE) {
             $response = $event->getResponse();
-        if($this->currentNetworkPlugin->getNetwork()->status == Network::STATUS_INACTIVE) {
+            $code = 200;
-            $response = $event->getResponse();
-            $code = 200;
-            $content = json_encode(['success' => false, 'data' => '200 Unauthorized - Private network - inactive', 'fatal' => true]);
+            $content = json_encode([
-            $this->sendResponse($response, $code, $content);
+                'success' => false,
                 'data' => '200 Unauthorized - Private network - inactive',
-        }
                 'fatal' => true
             ]);
+            $this->sendResponse($response, $code, $content);
+        }
         $this->authByOTP = false;
-        if($device_uuid && $password && $rand && $timestamp) {
+        $this->authByOTP = false;
-            $this->authByOTP = true;
+        if ($device_uuid && $password && $rand && $timestamp) {
             $this->authByOTP = true;
+            $tokenAuthAdapter = new AuthTokenAdapter($adapter);
+            $tokenAuthAdapter->setData($device_uuid, $password, $timestamp, $rand);
-            $tokenAuthAdapter = new AuthTokenAdapter($adapter);
+            $authService = new AuthenticationService();
+            $result = $authService->authenticate($tokenAuthAdapter);
-            $tokenAuthAdapter->setData($device_uuid, $password, $timestamp, $rand);
+            if ($result->getCode() != \Laminas\Authentication\Result::SUCCESS) {
             $authService = new AuthenticationService();
-            $result = $authService->authenticate($tokenAuthAdapter);
-            if($result->getCode() != \Laminas\Authentication\Result::SUCCESS) {
+                $response = $event->getResponse();
+                $code = 200;
-                $response = $event->getResponse();
+                $content = json_encode([
-                $code = 200;
+                    'success' => false,
-                $content = json_encode(['success' => false, 'data' => $result->getMessages()[0], 'fatal' => true]);
+                    'data' => $result->getMessages()[0],
-                $this->sendResponse($response, $code, $content);
+                    'fatal' => true
+                ]);
-            }
+                $this->sendResponse($response, $code, $content);
+            }
-        }
+        }
-        $this->jwtID = 0;
         $this->authByJWT = false;
-        $headers = getallheaders();
+        $this->jwtID = 0;
+        $this->authByJWT = false;
-        if(!empty($headers['authorization']) || !empty($headers['Authorization'])) {
+        $headers = getallheaders();
-            $token = trim(empty($headers['authorization']) ? $headers['Authorization'] : $headers['authorization']);
+        if (! empty($headers['authorization']) || ! empty($headers['Authorization'])) {
-            if (substr($token, 0, 6 ) == 'Bearer') {
+            $token = trim(empty($headers['authorization']) ? $headers['Authorization'] : $headers['authorization']);
-                $token = trim(substr($token, 7));
             if (substr($token, 0, 6) == 'Bearer') {
                 if(!empty($this->config['leaderslinked.jwt.key'])) {
+                $token = trim(substr($token, 7));
-                    $key = $this->config['leaderslinked.jwt.key'];
+                if (! empty($this->config['leaderslinked.jwt.key'])) {
+                    $key = $this->config['leaderslinked.jwt.key'];
                     try {
-                    try {
-                        $payload = JWT::decode($token, new Key($key, 'HS256'));
                         $payload = JWT::decode($token, new Key($key, 'HS256'));
+                        if (empty($payload->iss) || $payload->iss != $_SERVER['HTTP_HOST']) {
                         if(empty($payload->iss) || $payload->iss != $_SERVER['HTTP_HOST']) {
+                            $response = $event->getResponse();
-                            $response = $event->getResponse();
+                            $code = 200;
-                            $code = 200;
+                            $content = json_encode([
-                            $content = json_encode(['success' => false, 'data' => 'Unauthorized - JWT - Wrong server', 'fatal' => true]);
+                                'success' => false,
-                            $this->sendResponse($response, $code, $content);
+                                'data' => 'Unauthorized - JWT - Wrong server',
                                 'fatal' => true
+                            ]);
                             $this->sendResponse($response, $code, $content);
                         }
                         $uuid = empty($payload->uuid) ? '' : $payload->uuid;
-                        if($uuid) {
+                        if ($uuid) {
                             $jwtTokenMapper = JwtTokenMapper::getInstance($adapter);
                             $jwtToken = $jwtTokenMapper->fetchOneByUuid($uuid);
-                            if($jwtToken) {
+                            if ($jwtToken) {
                                 $this->jwtID = $jwtToken->id;
                                 $_SESSION['aes'] = $jwtToken->aes;
+                                if ($jwtToken->user_id) {
+                                    $authByUserId = new AuthUserIdAdapter($adapter);
+                                    $authByUserId->setData($jwtToken->user_id);
-                                if($jwtToken->user_id) {
+                                    $authService = new AuthenticationService();
-                                    $authByUserId = new AuthUserIdAdapter($adapter);
-                                    $authByUserId->setData($jwtToken->user_id);
+                                    $result = $authService->authenticate($authByUserId);
-                                    $authService = new AuthenticationService();
-                                    $result = $authService->authenticate($authByUserId);
+                                    if ($result->getCode() != \Laminas\Authentication\Result::SUCCESS) {
-                                    if($result->getCode() != \Laminas\Authentication\Result::SUCCESS) {
                                         $response = $event->getResponse();
                                         $code = 200;
-                                        $content = json_encode(['success' => false, 'data' => $result->getMessages()[0], 'fatal' => true]);
+                                        $content = json_encode([
+                                            'success' => false,
+                                            'data' => $result->getMessages()[0],
-                                        $this->sendResponse($response, $code, $content);
+                                            'fatal' => true
+                                        ]);
+                                        $this->sendResponse($response, $code, $content);
+                                    }
-                                    }
+                                }
+                            }
+                            else {
+                                $response = $event->getResponse();
-                            } else {
+                                $code = 200;
-                                $response = $event->getResponse();
+                                $content = json_encode([
+                                    'success' => false,
+                                    'data' => 'Unauthorized - JWT - Expired',
-                                $code = 200;
+                                    'fatal' => true
+                                ]);
+                                $this->sendResponse($response, $code, $content);
                                 $content = json_encode(['success' => false, 'data' => 'Unauthorized - JWT - Expired', 'fatal' => true]);
-                                $this->sendResponse($response, $code, $content);
+                        }
                     } catch (\Exception $e) {
                         $response = $event->getResponse();
-                    } catch(\Exception $e) {
-                        $response = $event->getResponse();
+                        $code = 200;
-                        $code = 200;
+                        $content = json_encode([
-                        $content = json_encode(['success' => false, 'data' => 'Unauthorized - JWT - Wrong key', 'fatal' => true]);
+                            'success' => false,
-                        $this->sendResponse($response, $code, $content);
                             'data' => 'Unauthorized - JWT - Wrong key',
                             'fatal' => true
                         ]);
-            }
                         $this->sendResponse($response, $code, $content);
+                    }
+                }
-        if(empty($_SERVER['REDIRECT_URL'])) {
             if(empty($_SERVER['REQUEST_URI'])) {
-                $routeName = '';
+        }
-            } else {
+        if (empty($_SERVER['REDIRECT_URL'])) {
-                $routeName = $_SERVER['REQUEST_URI'];
+            if (empty($_SERVER['REQUEST_URI'])) {
                 $routeName = '';
+            } else {
-        } else {
-            $routeName = $_SERVER['REDIRECT_URL'];
+                $routeName = $_SERVER['REQUEST_URI'];
-        }
+            }
+        } else {
             $routeName = $_SERVER['REDIRECT_URL'];
+        }
         $routeName = strtolower(trim($routeName));
+        if (strlen($routeName) > 0 && substr($routeName, 0, 1) == '/') {
+            $routeName = substr($routeName, 1);
         if(strlen($routeName) > 0 && substr($routeName, 0, 1) == '/') {
             $routeName = substr($routeName, 1);
-        }
         $this->currentUserPlugin = CurrentUserPlugin::getInstance($adapter);
-        $this->currentUserPlugin = CurrentUserPlugin::getInstance($adapter);
+        if ($this->currentUserPlugin->hasIdentity()) {
-        if($this->currentUserPlugin->hasIdentity()) {
             if (User::STATUS_BANNED == $this->currentUserPlugin->getUser()->status) {
+                $code = 200;
-            if(User::STATUS_BANNED == $this->currentUserPlugin->getUser()->status) {
+                $content = json_encode([
                     'success' => false,
-                $code = 200;
+                    'data' => '403 Forbidden - Banned',
-                $content = json_encode(['success' => false, 'data' => '403 Forbidden - Banned', 'fatal' => true]);
+                    'fatal' => true
-                $this->sendResponse($response, $code, $content);
+                ]);
                 $this->sendResponse($response, $code, $content);
+            }
         }
+        if ($this->authByOTP && substr($routeName, 0, 8) == 'services') {
+            $checkUserForNetwork = false;
+        } else {
+            if ($this->currentUserPlugin->hasIdentity()) {
         if($this->authByOTP && substr($routeName, 0, 8) == 'services') {
-            $checkUserForNetwork = false;
+                $checkUserForNetwork = true;
-        } else {
+            } else {
-            if($this->currentUserPlugin->hasIdentity()) {
+                $checkUserForNetwork = false;
+            }
-                $checkUserForNetwork = true;
-            } else {
-                $checkUserForNetwork = false;
+        }
-            }
-        }
+        if ($checkUserForNetwork) {
             if (! $routeName || in_array($routeName, [
+                'signout',
+                'signin',
-        if($checkUserForNetwork) {
+                'home'
+            ])) {
+                $checkUserForNetwork = false;
             if(!$routeName || in_array($routeName, ['signout', 'signin', 'home'])) {
-                $checkUserForNetwork = false;
+        }
         if ($checkUserForNetwork) {
-        if($checkUserForNetwork) {
             if ($this->currentUserPlugin->getUser()->network_id != $this->currentNetworkPlugin->getNetworkId()) {
-            if($this->currentUserPlugin->getUser()->network_id != $this->currentNetworkPlugin->getNetworkId()) {
                 $response = $event->getResponse();
+                $content = json_encode([
+                    'success' => false,
+                    'data' => '200 Unauthorized - The user is not part of this private network',
-                $content =  json_encode(['success' => false, 'data' => '200 Unauthorized - The user is not part of this private network', 'fatal' => true]);
+                    'fatal' => true
+                ]);
+                $this->sendResponse($response, 200, $content);
+                exit();
                 $this->sendResponse($response, 200, $content);
-                exit;
+        }
         $this->initAcl($event);
         $sharedManager = $eventManager->getSharedManager();
-        $this->initAcl($event);
+        $sharedManager->attach(__NAMESPACE__, MvcEvent::EVENT_DISPATCH, [
+            $this,
-        $sharedManager = $eventManager->getSharedManager();
+            'authPreDispatch'
-        $sharedManager->attach(__NAMESPACE__, MvcEvent::EVENT_DISPATCH, [$this, 'authPreDispatch'], 100);
+        ], 100);
-        $sharedManager->attach(__NAMESPACE__, MvcEvent::EVENT_DISPATCH, [$this, 'authPosDispatch'], -100);
+        $sharedManager->attach(__NAMESPACE__, MvcEvent::EVENT_DISPATCH, [
-    }
+            $this,
-    public function initAcl(MvcEvent $event)
+            'authPosDispatch'
         ], - 100);
+    }
         $serviceManager = $event->getApplication()->getServiceManager();
-        $adapter = $serviceManager->get('leaders-linked-db');
+    public function initAcl(MvcEvent $event)
+    {
-        require_once   (dirname(__DIR__) . DIRECTORY_SEPARATOR . 'config' . DIRECTORY_SEPARATOR . 'acl.config.php');
+        $serviceManager = $event->getApplication()->getServiceManager();
         $adapter = $serviceManager->get('leaders-linked-db');
         $this->acl = new Acl();
-        $resources = getAclResources();
+        require_once (dirname(__DIR__) . DIRECTORY_SEPARATOR . 'config' . DIRECTORY_SEPARATOR . 'acl.config.php');
-        foreach($resources as $resourceName)
-        {
-            $this->acl->addResource(new GenericResource($resourceName));
+        $this->acl = new Acl();
-        }
+        $resources = getAclResources();
-        $usertypes = getAclUsertype();
-        foreach($usertypes as $usertype => $resources)
+        foreach ($resources as $resourceName) {
-        {
+            $this->acl->addResource(new GenericResource($resourceName));
-            $this->acl->addRole(new GenericRole($usertype));
+        }
-            foreach ($resources as $resourceName)
-                $this->acl->allow($usertype, $resourceName);
+        $usertypes = getAclUsertype();
         foreach ($usertypes as $usertype => $resources) {
             $this->acl->addRole(new GenericRole($usertype));
             foreach ($resources as $resourceName) {
                 $this->acl->allow($usertype, $resourceName);
+            }
         if($this->currentUserPlugin->hasIdentity()) {
             $user_id = $this->currentUserPlugin->getUserId();
         if ($this->currentUserPlugin->hasIdentity()) {
-            if($this->currentUserPlugin->getUser()->is_super_user == User::IS_SUPER_USER_YES) {
+            $user_id = $this->currentUserPlugin->getUserId();
-                $resources =  getAclSuperAdmin();
+            if ($this->currentUserPlugin->getUser()->is_super_user == User::IS_SUPER_USER_YES) {
                 foreach($resources as $resourceName)
                 $resources = getAclSuperAdmin();
-                    $this->acl->allow(UserType::ADMIN, $resourceName);
+                foreach ($resources as $resourceName) {
-                }
+                    $this->acl->allow(UserType::ADMIN, $resourceName);
+                }
-        } else {
-            $user_id = 0;
-        }
-        $allowMyCoach = false;
         $allowKnowledgeArea = false;
-        $allowDailyPulse = false;
+        } else {
+            $user_id = 0;
-        if( $user_id) {
+        }
-            $allowMicrolearning = $this->isMicroLeargningAccessGranted($adapter, $user_id);
-            $allowHabit = $this->isHabitsAccessGranted($adapter, $user_id);
+        $allowMyCoach = false;
-        } else {
+        $allowKnowledgeArea = false;
-            $allowMicrolearning = false;
-            $allowHabit =  false;
+        $allowDailyPulse = false;
+        if ($user_id) {
+            $allowMicrolearning = $this->isMicroLeargningAccessGranted($adapter, $user_id);
+            $allowHabit = $this->isHabitsAccessGranted($adapter, $user_id);
-        $companyMapper = CompanyMapper::getInstance($adapter);
+        } else {
-        $company = $companyMapper->fetchDefaultForNetworkByNetworkId($this->currentNetworkPlugin->getNetwork()->id);
+            $allowMicrolearning = false;
             $allowHabit = false;
+        }
-        if($company) {
         $companyMapper = CompanyMapper::getInstance($adapter);
-            $companyServiceMapper = CompanyServiceMapper::getInstance($adapter);
-            $companyService = $companyServiceMapper->fetchOneActiveByCompanyIdAndServiceId($company->id, Service::DAILY_PULSE);
+        $company = $companyMapper->fetchDefaultForNetworkByNetworkId($this->currentNetworkPlugin->getNetwork()->id);
         if ($company) {
-            $companyUserMapper = CompanyUserMapper::getInstance($adapter);
-            $companyUser = $companyUserMapper->fetchOneAcceptedByCompanyIdAndUserId($company->id,  $this->currentUserPlugin->getUserId());
+            $companyServiceMapper = CompanyServiceMapper::getInstance($adapter);
             $companyService = $companyServiceMapper->fetchOneActiveByCompanyIdAndServiceId($company->id, Service::DAILY_PULSE);
+            $companyUserMapper = CompanyUserMapper::getInstance($adapter);
             $companyUser = $companyUserMapper->fetchOneAcceptedByCompanyIdAndUserId($company->id, $this->currentUserPlugin->getUserId());
-            if($companyService) {
                 $dailyPulseMapper = DailyPulseMapper::getInstance($adapter);
-                $dailyPulse = $dailyPulseMapper->fetchOneByCompanyId($company->id);
+            if ($companyService) {
-                if($dailyPulse) {
+                $dailyPulseMapper = DailyPulseMapper::getInstance($adapter);
-                    $privacy = $dailyPulse->privacy;
+                $dailyPulse = $dailyPulseMapper->fetchOneByCompanyId($company->id);
-                } else {
+                if ($dailyPulse) {
-                    $privacy = DailyPulse::PRIVACY_COMPANY;
                     $privacy = $dailyPulse->privacy;
                 } else {
-                if($privacy ==  DailyPulse::PRIVACY_PUBLIC) {
-                    $allowDailyPulse = true;
+                    $privacy = DailyPulse::PRIVACY_COMPANY;
-                } else {
+                }
-                    $allowDailyPulse = !empty($companyUser);
-                }
+                if ($privacy == DailyPulse::PRIVACY_PUBLIC) {
                     $allowDailyPulse = true;
                 } else {
+                    $allowDailyPulse = ! empty($companyUser);
-            $job_description_ids = [];
+                }
+            }
             $organizationPositionMapper = OrganizationPositionMapper::getInstance($adapter);
-            $records = $organizationPositionMapper->fetchAllByCompanyIdAndEmployeeId($company->id,  $this->currentUserPlugin->getUserId());
-            foreach($records as $record)
+            $job_description_ids = [];
-            {
-                array_push($job_description_ids, $record->job_description_id);
+            $organizationPositionMapper = OrganizationPositionMapper::getInstance($adapter);
             $records = $organizationPositionMapper->fetchAllByCompanyIdAndEmployeeId($company->id, $this->currentUserPlugin->getUserId());
             foreach ($records as $record) {
+                array_push($job_description_ids, $record->job_description_id);
             $companyService = $companyServiceMapper->fetchOneActiveByCompanyIdAndServiceId($company->id, Service::KNOWLEDGE_AREA);
             if($companyService) {
-                if($job_description_ids) {
+            $companyService = $companyServiceMapper->fetchOneActiveByCompanyIdAndServiceId($company->id, Service::KNOWLEDGE_AREA);
             if ($companyService) {
+                if ($job_description_ids) {
                     $knowledgeAreaCategoryJobDescriptionMapper = KnowledgeAreaCategoryJobDescriptionMapper::getInstance($adapter);
-                    $records = $knowledgeAreaCategoryJobDescriptionMapper->fetchAllByCompanyIdAndJobDescriptionIds($company->id, $job_description_ids);
+                    $knowledgeAreaCategoryJobDescriptionMapper = KnowledgeAreaCategoryJobDescriptionMapper::getInstance($adapter);
-                    if(!empty($records)) {
+                    $records = $knowledgeAreaCategoryJobDescriptionMapper->fetchAllByCompanyIdAndJobDescriptionIds($company->id, $job_description_ids);
-                        $allowKnowledgeArea = true;
-                    }
+                    if (! empty($records)) {
                         $allowKnowledgeArea = true;
+                    }
-                if($companyUser && !$allowKnowledgeArea) {
+                }
-                    $knowledgeAreaCategoryUserMapper = KnowledgeAreaCategoryUserMapper::getInstance($adapter);
-                    $records = $knowledgeAreaCategoryUserMapper->fetchAllByUserId($companyUser->user_id);
+                if ($companyUser && ! $allowKnowledgeArea) {
-                    if(!empty($records)) {
+                    $knowledgeAreaCategoryUserMapper = KnowledgeAreaCategoryUserMapper::getInstance($adapter);
-                        $allowKnowledgeArea = true;
                     $records = $knowledgeAreaCategoryUserMapper->fetchAllByUserId($companyUser->user_id);
-                }
+                    if (! empty($records)) {
-            }
+                        $allowKnowledgeArea = true;
+                    }
             $companyService = $companyServiceMapper->fetchOneActiveByCompanyIdAndServiceId($company->id, Service::MY_COACH);
-            if($companyService) {
+            }
             $companyService = $companyServiceMapper->fetchOneActiveByCompanyIdAndServiceId($company->id, Service::MY_COACH);
-                if($job_description_ids) {
             if ($companyService) {
                     $myCoachCategoryJobDescriptionMapper = MyCoachCategoryJobDescriptionMapper::getInstance($adapter);
-                    $records = $myCoachCategoryJobDescriptionMapper->fetchAllByCompanyIdAndJobDescriptionIds($company->id, $job_description_ids);
                 if ($job_description_ids) {
                     if(!empty($records)) {
-                        $allowKnowledgeArea = true;
+                    $myCoachCategoryJobDescriptionMapper = MyCoachCategoryJobDescriptionMapper::getInstance($adapter);
-                    }
+                    $records = $myCoachCategoryJobDescriptionMapper->fetchAllByCompanyIdAndJobDescriptionIds($company->id, $job_description_ids);
+                    if (! empty($records)) {
-                if($companyUser && !$allowMyCoach) {
+                        $allowKnowledgeArea = true;
-                    $myCoachCategoryUserMapper = MyCoachCategoryUserMapper::getInstance($adapter);
+                    }
-                    $records = $myCoachCategoryUserMapper->fetchAllByUserId($companyUser->user_id);
                     if(!empty($records)) {
                         $allowMyCoach = true;
                 if ($companyUser && ! $allowMyCoach) {
+                    $myCoachCategoryUserMapper = MyCoachCategoryUserMapper::getInstance($adapter);
+                    $records = $myCoachCategoryUserMapper->fetchAllByUserId($companyUser->user_id);
                     if (! empty($records)) {
-            }
+                        $allowMyCoach = true;
         } else {
             $companyUser = '';
+            }
+        } else {
+            $companyUser = '';
         $usertype = $this->currentUserPlugin->getUserTypeId();
-        if($allowDailyPulse) {
-            $resources = getAclDailyPulse();
-            foreach($resources as $resourceName)
+        $usertype = $this->currentUserPlugin->getUserTypeId();
         if ($allowDailyPulse) {
-                $this->acl->allow($usertype, $resourceName);
+            $resources = getAclDailyPulse();
-            }
-        }
+            foreach ($resources as $resourceName) {
+                $this->acl->allow($usertype, $resourceName);
         if($allowMicrolearning) {
-            $resources = getAclMicrolearning();
+        }
-            foreach($resources as $resourceName)
-                $this->acl->allow($usertype, $resourceName);
+        if ($allowMicrolearning) {
             $resources = getAclMicrolearning();
-        }
+            foreach ($resources as $resourceName) {
+                $this->acl->allow($usertype, $resourceName);
         if($allowHabit) {
-            $resources = getAclHabits();
-            foreach($resources as $resourceName)
+        }
-            {
-                $this->acl->allow($usertype, $resourceName);
-            }
         if ($allowHabit) {
             $resources = getAclHabits();
-        if($allowKnowledgeArea) {
+            foreach ($resources as $resourceName) {
-            $resources = getAclKnowledgeArea();
-            foreach($resources as $resourceName)
-            {
-                $this->acl->allow($usertype, $resourceName);
-            }
-        }
-        if($allowMyCoach) {
-            $resources = getAclMyCoach();
+                $this->acl->allow($usertype, $resourceName);
+            }
+        }
-            foreach($resources as $resourceName)
+        if ($allowKnowledgeArea) {
             $resources = getAclKnowledgeArea();
-                $this->acl->allow($usertype, $resourceName);
+            foreach ($resources as $resourceName) {
                 $this->acl->allow($usertype, $resourceName);
-        }
+            }
+        }
+        if ($allowMyCoach) {
-        if($this->currentNetworkPlugin->getNetwork()->default == Network::DEFAULT_YES) {
+            $resources = getAclMyCoach();
-            $usertypes = getAclUsertypeDefaultNetwork();
-            foreach($usertypes as $usertype => $resources)
+            foreach ($resources as $resourceName) {
                 $this->acl->allow($usertype, $resourceName);
+            }
+        }
-                foreach ($resources as $resourceName)
+        if ($this->currentNetworkPlugin->getNetwork()->default == Network::DEFAULT_YES) {
-                {
-                    $this->acl->allow($usertype, $resourceName);
             $usertypes = getAclUsertypeDefaultNetwork();
             foreach ($usertypes as $usertype => $resources) {
-        } else {
+                foreach ($resources as $resourceName) {
+                    $this->acl->allow($usertype, $resourceName);
-            if($this->currentUserPlugin->hasIdentity()) {
+                }
+            }
-                if($company) {
+        } else {
             if ($this->currentUserPlugin->hasIdentity()) {
                     if($companyUser) {
-                        $usertype = $this->currentUserPlugin->getUserTypeId();
+                if ($company) {
-                        if($companyUser->creator == CompanyUser::CREATOR_YES) {
-                            $resources =  getAclUsertypeOtherNetworkCreator();
-                            foreach($resources as $resourceName)
-                            {
+                    if ($companyUser) {
-                                $this->acl->allow($usertype, $resourceName);
+                        $usertype = $this->currentUserPlugin->getUserTypeId();
-                            }
                         if ($companyUser->creator == CompanyUser::CREATOR_YES) {
-                        if($companyUser->creator == CompanyUser::CREATOR_NO) {
+                            $resources = getAclUsertypeOtherNetworkCreator();
-                            $resources =  getAclUsertypeOtherNetworkNonCreator();
+                            foreach ($resources as $resourceName) {
-                            foreach($resources as $resourceName)
+                                $this->acl->allow($usertype, $resourceName);
+                            }
                                 $this->acl->allow($usertype, $resourceName);
                         if ($companyUser->creator == CompanyUser::CREATOR_NO) {
                             $resources = getAclUsertypeOtherNetworkNonCreator();
-                    }
+                            foreach ($resources as $resourceName) {
                                 $this->acl->allow($usertype, $resourceName);
-            }
+                            }
+                        }
+                    }
+                }
         $event->getViewModel()->setVariable('acl', $this->acl);
+        }
-    }
-    public function onDispatchError(MvcEvent $event)
+        $event->getViewModel()->setVariable('acl', $this->acl);
+    }
         $this->processError($event);
-    }
+    public function onDispatchError(MvcEvent $event)
+    {
-    public function onRenderError(MvcEvent $event)
+        $this->processError($event);
+    }
-        $this->processError($event);
     public function onRenderError(MvcEvent $event)
+    {
-    /**
+        $this->processError($event);
-     *
+    }
      * @param \Laminas\Http\Response $response
-     * @param int $code
+    /**
      * @param string $content
-     */
+     * @param \Laminas\Http\Response $response
-    public function sendResponse($response, $code, $content)
+     * @param int $code
      * @param string $content
+     */
     public function sendResponse($response, $code, $content)
+    {
-        $headers = $response->getHeaders();
-        $headers->clearHeaders();
+        $headers = $response->getHeaders();
-        $headers->addHeaderLine('Content-type', 'application/json; charset=UTF-8');
+        $headers->clearHeaders();
         $headers->addHeaderLine('Content-type', 'application/json; charset=UTF-8');
         Functions::addCrossSiteToResponse($response);
+        Functions::addCrossSiteToResponse($response);
         $response->setStatusCode($code);
-        $response->setContent($content); //json_encode($data));
+        $response->setStatusCode($code);
+        $response->setContent($content); // json_encode($data));
+        $response->send();
-        $response->send();
+        exit();
+    }
-        exit;
+    public function processError(MvcEvent $event)
-    }
+    {
-    public function processError(MvcEvent $event)
+        $error = $event->getError();
         if (! $error) {
-        $error = $event->getError();
+            return;
+        }
-        if (!$error) {
+        $response = $event->getResponse();
+        if ('error-exception' == $error) {
-            return;
+            $exception = $event->getParam('exception');
-        }
+            error_log($exception->getCode() . ' ' . $exception->getMessage());
-        $response = $event->getResponse();
-        if('error-exception' == $error) {
             error_log($exception->getTraceAsString());
+            $response = $event->getResponse();
+            $code = 200;
-            $exception = $event->getParam('exception');
+            $content = json_encode([
+                'success' => false,
+                'data' => $exception->getCode() . ' ' . $exception->getMessage(),
-            error_log($exception->getCode() . ' ' . $exception->getMessage());
+                'fatal' => true
-            error_log($exception->getTraceAsString());
-            $response = $event->getResponse();
+            ]);
-            $code = 200;
+            $this->sendResponse($response, $code, $content);
-            $content = json_encode(['success' => false, 'data' => $exception->getCode() . ' ' . $exception->getMessage(), 'fatal' => true]);
+        } else if ('error-router-no-match' == $error) {
-            $this->sendResponse($response, $code, $content);
+            $response = $event->getResponse();
+            $code = 404;
+            $content = json_encode([
+                'success' => false,
                 'data' => 'error-router-no-match',
-        } else if('error-router-no-match' == $error) {
-            $response = $event->getResponse();
+                'fatal' => true
-            $code = 404;
+            ]);
-            $content = json_encode(['success' => false, 'data' => 'error-router-no-match', 'fatal' => true]);
             $this->sendResponse($response, $code, $content);
         } else if (' error-controller-not-found' == $error) {
-        } else if(' error-controller-not-found' == $error) {
-            $response = $event->getResponse();
-            $code = 404;
-            $content = json_encode(['success' => false, 'data' => 'error-controller-not-found', 'fatal' => true]);
+            $response = $event->getResponse();
-            $this->sendResponse($response, $code, $content);
+            $code = 404;
+            $content = json_encode([
                 'success' => false,
-        } else {
-            $response = $event->getResponse();
+                'data' => 'error-controller-not-found',
-            $code = 200;
+                'fatal' => true
-            $content = json_encode(['success' => false, 'data' => $error, 'fatal' => true]);
+            ]);
-            $this->sendResponse($response, $code, $content);
+            $this->sendResponse($response, $code, $content);
+        } else {
             $response = $event->getResponse();
             $code = 200;
-        exit;
+            $content = json_encode([
+                'success' => false,
                 'data' => $error,
+                'fatal' => true
-    public function authPreDispatch(MvcEvent $event)
+            ]);
-    {
+            $this->sendResponse($response, $code, $content);
+        }
         exit();
         $serviceManager = $event->getApplication()->getServiceManager();
         $adapter = $serviceManager->get('leaders-linked-db');
+    public function authPreDispatch(MvcEvent $event)
-        $routeName = $event->getRouteMatch()->getMatchedRouteName();
+    {
-        $requestMethod = isset($_SERVER['REQUEST_METHOD']) ? trim(strtoupper($_SERVER['REQUEST_METHOD'])) : '';
+        $serviceManager = $event->getApplication()->getServiceManager();
-        if($requestMethod == 'POST') {
+        $adapter = $serviceManager->get('leaders-linked-db');
         $routeName = $event->getRouteMatch()->getMatchedRouteName();
-            if($this->authByOTP && substr($routeName, 0, 8) == 'services') {
-                $exclude = true;
+        $requestMethod = isset($_SERVER['REQUEST_METHOD']) ? trim(strtoupper($_SERVER['REQUEST_METHOD'])) : '';
             } else {
-                $exclude = false;
+        if ($requestMethod == 'POST') {
-                $usertypes = getAclUsertype();
+            if ($this->authByOTP && substr($routeName, 0, 8) == 'services') {
                 $exclude = true;
-                foreach($usertypes[UserType::GUEST] as $resourceName)
+            } else {
                 $exclude = false;
-                   if($routeName == $resourceName) {
-                      $exclude = true;
                       break;
                 $usertypes = getAclUsertype();
+                foreach ($usertypes[UserType::GUEST] as $resourceName) {
-            }
+                    if ($routeName == $resourceName) {
-            if(!$exclude) {
+                        $exclude = true;
+                        break;
-                $httpToken = isset($_SERVER['HTTP_X_CSRF_TOKEN']) ? $_SERVER['HTTP_X_CSRF_TOKEN'] : '';
+                    }
+                }
+            }
-                if($this->jwtID) {
-                    $jwtTokenMapper = JwtTokenMapper::getInstance($this->adapter);
-                    $jwtToken = $jwtTokenMapper->fetchOne($this->jwtID);
-                    if($jwtToken) {
+            if (! $exclude) {
-                        $sessionToken = $jwtToken->csrf;
+                $httpToken = isset($_SERVER['HTTP_X_CSRF_TOKEN']) ? $_SERVER['HTTP_X_CSRF_TOKEN'] : '';
-                        //$jwtToken->csrf= '';
-                       // $jwtTokenMapper->update($jwtToken);
+                if ($this->jwtID) {
                     } else {
-                        $sessionToken = '';
+                    $jwtTokenMapper = JwtTokenMapper::getInstance($this->adapter);
-                    }
+                    $jwtToken = $jwtTokenMapper->fetchOne($this->jwtID);
-                } else {
-                    $sessionToken = '';
-                }
+                    if ($jwtToken) {
                 //error_log('$this->jwtID = ' . $this->jwtID . ' $httpToken = ' . $httpToken . ' $sessionToken = ' . $sessionToken);
-               // if ( $httpToken != $sessionToken) {
+                        $sessionToken = $jwtToken->csrf;
-                //    $response = $event->getResponse();
+                        // $jwtToken->csrf= '';
                 //    $this->sendResponse($response, 200, json_encode(['success' => false, 'data' => 'Unauthorized - CSRF fail', 'fatal' => true]));
-               // }
+                        // $jwtTokenMapper->update($jwtToken);
                     } else {
-            }
+                        $sessionToken = '';
+                    }
                 } else {
+                    $sessionToken = '';
+                }
-        if($this->currentUserPlugin->hasIdentity())  {
+                // error_log('$this->jwtID = ' . $this->jwtID . ' $httpToken = ' . $httpToken . ' $sessionToken = ' . $sessionToken);
-            $user = $this->currentUserPlugin->getUser();
-            $user_id = $user->id;
-            $userTypeId = $user->usertype_id;
+                // if ( $httpToken != $sessionToken) {
                 // $response = $event->getResponse();
                 // $this->sendResponse($response, 200, json_encode(['success' => false, 'data' => 'Unauthorized - CSRF fail', 'fatal' => true]));
-        }  else {
+                // }
+            }
-            $userTypeId = UserType::GUEST;
-            $user_id = 0;
-        }
+        }
         if ($this->currentUserPlugin->hasIdentity()) {
+            $user = $this->currentUserPlugin->getUser();
+            $user_id = $user->id;
+            $userTypeId = $user->usertype_id;
+        } else {
             $userTypeId = UserType::GUEST;
+            $user_id = 0;
-        if($this->acl->isAllowed($userTypeId, $routeName)) {
-            $user = $this->currentUserPlugin->getUser();
+        }
-            if($user) {
-                $updateLastActivity = true;
-                if ('chat' == substr($routeName, 0, 4)) {
                     $updateLastActivity = false;
-                }
-                if ('inmail' == substr($routeName, 0, 6)) {
+        if ($this->acl->isAllowed($userTypeId, $routeName)) {
-                    $updateLastActivity = false;
+            $user = $this->currentUserPlugin->getUser();
-                }
-                if ('check-session' == $routeName) {
+            if ($user) {
                     $updateLastActivity = false;
-                }
+                $updateLastActivity = true;
                 if ('chat' == substr($routeName, 0, 4)) {
-                if($updateLastActivity) {
+                    $updateLastActivity = false;
                     $userMapper = UserMapper::getInstance($adapter);
-                    $userMapper->updateLastActivity($user->id);
+                if ('inmail' == substr($routeName, 0, 6)) {
                     $updateLastActivity = false;
+                }
                 if ('check-session' == $routeName) {
                     $updateLastActivity = false;
         } else {
             $response = $event->getResponse();
                 if ($updateLastActivity) {
-            $response->setStatusCode(200);
+                    $userMapper = UserMapper::getInstance($adapter);
-            $response->setContent(json_encode(['success' => false, 'data' => 'Unauthorized - Does not have permission', 'fatal' => true]));
+                    $userMapper->updateLastActivity($user->id);
-            $response->send();
-            exit;
+                }
+            }
         } else {
             $response = $event->getResponse();
+            $response->setStatusCode(200);
             $response->setContent(json_encode([
                 'success' => false,
                 'data' => 'Unauthorized - Does not have permission',
                 'fatal' => true
             ]));
             $response->send();
-    public function authPosDispatch(MvcEvent $event)
+            exit();
+        }
         //$response = $event->getResponse();
-       // Functions::addCrossSiteToResponse($response);
-    }
     public function authPosDispatch(MvcEvent $event)
     /**
         // $response = $event->getResponse();
-     * @param \Laminas\Db\Adapter\AdapterInterface $adapter
+        // Functions::addCrossSiteToResponse($response);
      * @param int $user_id
      * @return boolean
-     */
+    /**
     private function isMicroLeargningAccessGranted($adapter, $user_id)
-    {
      * @param \Laminas\Db\Adapter\AdapterInterface $adapter
-        $accessGranted = false;
+     * @param int $user_id
-        $capsuleUserMapper = \LeadersLinked\Mapper\MicrolearningCapsuleUserMapper::getInstance($adapter);
+     * @return boolean
-        $now = $capsuleUserMapper->getDatebaseNow();
+     */
     private function isMicroLeargningAccessGranted($adapter, $user_id)
-        $records = $capsuleUserMapper->fetchAllActiveByUserId($user_id);
+    {
+        $accessGranted = false;
-        foreach($records as $record)
+        $capsuleUserMapper = \LeadersLinked\Mapper\MicrolearningCapsuleUserMapper::getInstance($adapter);
         $now = $capsuleUserMapper->getDatebaseNow();
             if($record->access != \LeadersLinked\Model\MicrolearningCapsuleUser::ACCESS_UNLIMITED && $record->access != \LeadersLinked\Model\MicrolearningCapsuleUser::ACCESS_PAY_PERIOD) {
-                continue;
+        $records = $capsuleUserMapper->fetchAllActiveByUserId($user_id);
-            }
-            if($record->access == \LeadersLinked\Model\MicrolearningCapsuleUser::ACCESS_PAY_PERIOD) {
+        foreach ($records as $record) {
-                if($now < $record->paid_from || $now > $record->paid_to) {
+            if ($record->access != \LeadersLinked\Model\MicrolearningCapsuleUser::ACCESS_UNLIMITED && $record->access != \LeadersLinked\Model\MicrolearningCapsuleUser::ACCESS_PAY_PERIOD) {
-                    continue;
+                continue;
+            }
-            }
+            if ($record->access == \LeadersLinked\Model\MicrolearningCapsuleUser::ACCESS_PAY_PERIOD) {
-            $accessGranted = true;
+                if ($now < $record->paid_from || $now > $record->paid_to) {
-            break;
+                    continue;
+                }
+            }
-        return $accessGranted;
+            $accessGranted = true;
             break;
     /**

Proyectos de Subversion LeadersLinked - Services

(root)/module/LeadersLinked/src/Module.php – Rev 339 → 345