Zabbix

<?php declare(strict_types = 0);

/*

** Zabbix

** Copyright (C) 2001-2024 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

​

class CControllerUserTokenEdit extends CController {

​

    protected function init() {

        $this->disableSIDValidation();

    }

​

    protected function checkInput() {

        $fields = [

            'tokenid'       => 'db token.tokenid',

            'name'          => 'db token.name',

            'description'   => 'db token.description',

            'expires_state' => 'in 0,1',

            'expires_at'    => 'string',

            'status'        => 'db token.status|in '.ZBX_AUTH_TOKEN_ENABLED.','.ZBX_AUTH_TOKEN_DISABLED

        ];

​

        $ret = $this->validateInput($fields);

​

        if (!$ret) {

            $this->setResponse(new CControllerResponseFatal());

        }

​

        return $ret;

    }

​

    protected function checkPermissions() {

        if (CWebUser::isGuest()) {

            return false;

        }

​

        return $this->checkAccess(CRoleHelper::ACTIONS_MANAGE_API_TOKENS);

    }

​

    protected function doAction() {

        if ($this->hasInput('tokenid')) {

            $tokens = API::Token()->get([

                'output' => ['tokenid', 'name', 'description', 'expires_at', 'status'],

                'tokenids' => $this->getInput('tokenid')

            ]);

​

            if (!$tokens) {

                access_deny(ACCESS_DENY_PAGE);