وب‌سرویس‌های Auth Push آزمایشی

curl -X POST https://pushfa.com/api/webservices/auth-push/bind \
  -H "Content-Type: application/json" \
  -d '{
    "api_public_key": "YOUR_PUBLIC_KEY",
    "api_private_key": "YOUR_PRIVATE_KEY",
    "subscriber_id": "DEVICE_SUBSCRIBER_UUID",
    "auth_identity": "YOUR_USER_UUID"
  }'

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Http;

Route::post('/account/trusted-device', function (Request $request) {
    $data = $request->validate(['subscriber_id' => ['required', 'uuid']]);

    Http::asJson()->post('https://pushfa.com/api/webservices/auth-push/bind', [
        'api_public_key' => config('services.pushfa.public_key'),
        'api_private_key' => config('services.pushfa.private_key'),
        'subscriber_id' => $data['subscriber_id'],
        'auth_identity' => $request->user()->uuid,
    ])->throw();

    return response()->json(['trusted' => true]);
})->middleware('auth');

curl -X POST https://pushfa.com/api/webservices/auth-push/challenges \
  -H "Content-Type: application/json" \
  -d '{
    "api_public_key": "YOUR_PUBLIC_KEY",
    "api_private_key": "YOUR_PRIVATE_KEY",
    "auth_identity": "YOUR_USER_UUID",
    "requester_subscriber_id": "REQUESTER_SUBSCRIBER_UUID",
    "mode": "approval",
    "expires_in": 120
  }'

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Http;

Route::post('/auth/push/start', function (Request $request) {
    $data = $request->validate([
        'username' => ['required', 'string'],
        'subscriber_id' => ['required', 'uuid'],
        'mode' => ['nullable', 'in:approval,otp'],
    ]);

    $user = User::where('username', $data['username'])->firstOrFail();
    $response = Http::asJson()->post(
        'https://pushfa.com/api/webservices/auth-push/challenges',
        [
            'api_public_key' => config('services.pushfa.public_key'),
            'api_private_key' => config('services.pushfa.private_key'),
            'auth_identity' => $user->uuid,
            'requester_subscriber_id' => $data['subscriber_id'],
            'mode' => $data['mode'] ?? 'approval',
            'expires_in' => 120,
            'reference' => (string) $user->uuid,
            'context' => [
                'ip' => $request->ip(),
                'device' => $request->userAgent(),
            ],
        ]
    );

    if ($response->status() === 422) {
        return response()->json(['fallback_required' => true], 422);
    }

    return response()->json($response->throw()->json('data'));
})->middleware('throttle:5,1');

curl -X POST https://pushfa.com/api/webservices/auth-push/grants/consume \
  -H "Content-Type: application/json" \
  -d '{
    "api_public_key": "YOUR_PUBLIC_KEY",
    "api_private_key": "YOUR_PRIVATE_KEY",
    "challenge_id": "CHALLENGE_UUID",
    "grant": "ONE_TIME_GRANT",
    "auth_identity": "YOUR_USER_UUID"
  }'

Route::post('/auth/push/complete', function (Request $request) {
    $data = $request->validate([
        'challenge_id' => ['required', 'uuid'],
        'grant' => ['required', 'string', 'size:64'],
    ]);

    // نگاشت Challenge به کاربر باید در state امن Backend شما نگهداری شود.
    $user = resolveUserForChallenge($data['challenge_id']);
    $verified = Http::asJson()->post(
        'https://pushfa.com/api/webservices/auth-push/grants/consume',
        [
            'api_public_key' => config('services.pushfa.public_key'),
            'api_private_key' => config('services.pushfa.private_key'),
            'challenge_id' => $data['challenge_id'],
            'grant' => $data['grant'],
            'auth_identity' => $user->uuid,
        ]
    )->throw()->json('data.verified');

    abort_unless($verified === true, 401);
    auth()->login($user);
    $request->session()->regenerate();

    return response()->json(['redirect_to' => '/dashboard']);
});

curl -X POST https://pushfa.com/api/webservices/auth-push/unbind \
  -H "Content-Type: application/json" \
  -d '{
    "api_public_key": "YOUR_PUBLIC_KEY",
    "api_private_key": "YOUR_PRIVATE_KEY",
    "subscriber_id": "DEVICE_SUBSCRIBER_UUID"
  }'