Zabbix

<?php declare(strict_types = 0);

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

class CControllerTokenList extends CController {

​

    protected function init() {

        $this->disableCsrfValidation();

    }

​

    protected function checkInput() {

        $fields = [

            'sort'                   => 'in name,user,expires_at,creator,lastaccess,status',

            'sortorder'              => 'in '.ZBX_SORT_DOWN.','.ZBX_SORT_UP,

            'uncheck'                => 'in 1',

            'filter_set'             => 'in 1',

            'filter_rst'             => 'in 1',

            'filter_name'            => 'string',

            'filter_userids'         => 'array_db users.userid',

            'filter_expires_state'   => 'in 1',

            'filter_expires_days'    => 'int32',

            'filter_creator_userids' => 'array_db users.userid',

            'filter_status'          => 'in -1,'.ZBX_AUTH_TOKEN_ENABLED.','.ZBX_AUTH_TOKEN_DISABLED,

            'page'                   => 'ge 1'

        ];

​

        $ret = $this->validateInput($fields);

​

        if (!$ret) {

            $this->setResponse(new CControllerResponseFatal());

        }

​

        return $ret;

    }

​

    protected function checkPermissions() {

        if (CWebUser::isGuest()) {

            return false;

        }

​

        return ($this->checkAccess(CRoleHelper::ACTIONS_MANAGE_API_TOKENS)

            && $this->checkAccess(CRoleHelper::UI_ADMINISTRATION_API_TOKENS)

        );

    }

​

    protected function doAction() {

        $sort_field = $this->getInput('sort', CProfile::get('web.token.list.sort', 'name'));

        $sort_order = $this->getInput('sortorder', CProfile::get('web.token.list.sortorder', ZBX_SORT_UP));

​

        CProfile::update('web.token.list.sort', $sort_field, PROFILE_TYPE_STR);

        CProfile::update('web.token.list.sortorder', $sort_order, PROFILE_TYPE_STR);