SEPM14APIv2.php

<?php

class SEPM14APIv2 {

	private $token = NULL;
	private $token_expiration = 0;
	private $auth = [];
	private $ip;
	private $port;
	private $api_server;

	function __construct(string $ip = "127.0.0.1", string $port = "8446")
	{
		if (!filter_var($ip, FILTER_VALIDATE_IP) === false) {
			$this->api_server = "https://".$ip.":".$port."/sepm/api/v1";
			$this->ip = $ip;
			$this->port = $port;
		} else {
			die("API error: invalid IP address (".$ip.") for server");
		}
	}

	function log(string $msg)
	{
		echo $msg."\r\n";
	}

	public function wait()
	{
		$this->log("Waiting for 60 seconds..");
		sleep(61);
	}

	public function call(string $api_method, string $http_method = "GET", array $data = [])
	{
		if (!is_null($this->token)){
			$timeNow = time();
			if (($this->token_expiration - $timeNow)  < 160) {
				$this->log("Token expired. Refreshing ..");
				$this->refreshToken();
				$this->wait();
			}
		}

		$header_array = ["Content-Type: application/json"];
		if (!is_null($this->token)){
			$header_array[] = "Authorization: Bearer ".$this->token;
		}

		$ch = curl_init();

		switch ($http_method) {
			case "POST":
				curl_setopt($ch, CURLOPT_POST, true);
				curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
				break;
			case "PATCH":
				curl_setopt($ch, CURLOPT_HEADER,true);
				curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "PATCH");
				curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
				break;
		}

		curl_setopt($ch, CURLOPT_URL, $this->api_server.$api_method);
		curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); 
		curl_setopt($ch, CURLOPT_USERAGENT, "REST-API-CLIENT 1.0");
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($ch, CURLOPT_HTTPHEADER, $header_array);
		curl_setopt($ch, CURLOPT_VERBOSE, false);

		$response = curl_exec($ch);

		if(!curl_errno($ch))
		{
			$info = curl_getinfo($ch);
			# 207 - Multi-status - I get that when I PATCH/move machines
			# 204 - Logout returns nothing
			if ($info["http_code"] != 200){

				if ($info["http_code"] == 429) { # Too many requests
					$this->log("The number of calls reached the threshold");
					$this->wait();
					$this->log("Retrying the last call");
					curl_close($ch);
					return $this->call($api_method, $http_method, $data);
				}

				if (
					!($info["http_code"] == 204 && $api_method == "/identity/logout") &&
					!($info["http_code"] == 207 && $http_method == "PATCH")
				){
					$api_error_msg = $api_method." failed with code ".$info["http_code"];
				}
			}
		} else {
			$http_error_msg = curl_error($ch);
		}

		curl_close($ch);

		if (isset($http_error_msg)){
			die('HTTP error: '.$http_error_msg);
		}

		if (isset($api_error_msg)){
			die('API error: '.$api_error_msg);
		}

		return json_decode($response, 1);
	}

	public function refreshToken()
	{
		$this->api_server_backup = $this->api_server;
		$this->api_server = "https://".$this->ip.":".$this->port."/sepm";

		$data = ["client_id" => $this->auth['clientId'], "client_secret" => $this->auth['clientSecret'], "refresh_token" => $this->auth['refreshToken']];
		$refresh = $this->call("/oauth/token?grant_type=refresh_token&client_id=".$this->auth['clientId']."&client_secret=".$this->auth['clientSecret']."&refresh_token=".$this->auth['refreshToken'], "POST", $data);

		$timeNow = time();
		$this->token = $refresh['access_token'];
		$this->token_expiration = $timeNow + intval($refresh['tokenExpiration']);
		$this->log("Token: ".$this->token);
		$this->log("Expires in: ".$refresh['tokenExpiration']." seconds");	

		$this->api_server = $this->api_server_backup;
	}

	public function authenticate(string $user, string $pass, string $domain = "")
	{
		$this->token = NULL;
		$this->auth = $this->call("/identity/authenticate", "POST", ["username" => $user, "password" => $pass, "domain" => $domain]);

		$timeNow = time();
		$this->token = $this->auth['token'];
		$this->token_expiration = $timeNow + intval($this->auth['tokenExpiration']);
		$this->log("Token: ".$this->token);
		$this->log("Expires in: ".$this->auth['tokenExpiration']." seconds");
	}

	public function logOut()
	{
		$this->call("/identity/logout", "POST", ["adminId" => $this->auth['adminId'], "token" => $this->token]);
	}
}

?>