Merge pull request #5 from friloo/claude/unifi-api-migration-dbNMa

Claude/unifi api migration db n ma
This commit is contained in:
friloo 2026-04-22 09:24:08 +02:00 committed by GitHub
commit bf3e55a967
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 207 additions and 5 deletions

View file

@ -6,6 +6,8 @@ class UniFiController {
private $siteId;
private $cookieFile;
private $csrfToken = null;
private $sessionCookie = null;
private $loggedIn = false;
public function __construct($controllerUrl, $username, $password, $siteId) {
$this->controllerUrl = rtrim($controllerUrl, '/');
@ -23,6 +25,10 @@ class UniFiController {
// Login zum Controller
private function login() {
if ($this->loggedIn) {
return true;
}
$ch = curl_init();
curl_setopt_array($ch, [
@ -38,14 +44,26 @@ class UniFiController {
CURLOPT_COOKIEFILE => $this->cookieFile,
CURLOPT_TIMEOUT => 10,
CURLOPT_CONNECTTIMEOUT => 5,
CURLOPT_HTTPHEADER => ['Content-Type: application/json'],
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
'Origin: ' . $this->controllerUrl,
'Referer: ' . $this->controllerUrl . '/login',
],
CURLOPT_HEADERFUNCTION => function($ch, $header) {
$parts = explode(':', $header, 2);
if (count($parts) === 2) {
$name = trim($parts[0]);
$name = strtolower(trim($parts[0]));
$value = trim($parts[1]);
if (strtolower($name) === 'x-csrf-token') {
if ($name === 'x-csrf-token') {
$this->csrfToken = $value;
} elseif ($name === 'set-cookie') {
// Extract TOKEN value directly — cookie jar may not persist
// cookies with the 'Partitioned' attribute on some libcurl versions
$cookieParts = explode(';', $value);
$first = trim($cookieParts[0]);
if (strpos($first, 'TOKEN=') === 0) {
$this->sessionCookie = $first;
}
}
}
return strlen($header);
@ -57,7 +75,9 @@ class UniFiController {
curl_close($ch);
if ($httpCode !== 200) {
throw new Exception("Login fehlgeschlagen: HTTP $httpCode");
$body = json_decode($response, true);
$detail = $body['meta']['msg'] ?? $body['errors'][0] ?? substr(strip_tags($response), 0, 120);
throw new Exception("Login fehlgeschlagen: HTTP $httpCode" . ($detail ? " $detail" : ''));
}
$data = json_decode($response, true);
@ -75,6 +95,7 @@ class UniFiController {
$this->csrfToken = $this->readCsrfFromCookieFile();
}
$this->loggedIn = true;
return true;
}
@ -94,12 +115,19 @@ class UniFiController {
CURLOPT_URL => $url,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_SSL_VERIFYPEER => false,
CURLOPT_COOKIEFILE => $this->cookieFile,
CURLOPT_TIMEOUT => 10,
CURLOPT_CONNECTTIMEOUT => 5,
CURLOPT_HTTPHEADER => $headers
];
// Prefer manually extracted cookie over file-based jar — the Partitioned
// attribute on the TOKEN cookie prevents some libcurl versions from writing it
if ($this->sessionCookie !== null) {
$options[CURLOPT_COOKIE] = $this->sessionCookie;
} else {
$options[CURLOPT_COOKIEFILE] = $this->cookieFile;
}
if ($method === 'GET') {
$options[CURLOPT_HTTPGET] = true;
} elseif ($method === 'POST') {

174
test.php
View file

@ -84,6 +84,180 @@ echo "<h2>7. Session</h2>";
echo "Session Status: " . session_status() . " (1=disabled, 2=active)<br>";
echo "Session ID: " . session_id() . "<br>";
// 8. UniFi API Diagnose
echo "<h2>8. UniFi API Diagnose</h2>";
try {
$db2 = Database::getInstance();
$site = $db2->fetchOne("SELECT * FROM sites WHERE is_active = 1 ORDER BY id ASC LIMIT 1");
if (!$site) {
echo "✗ Keine aktive Site in der Datenbank gefunden<br>";
} else {
echo "Site: <strong>" . htmlspecialchars($site['name']) . "</strong><br>";
echo "Controller URL: <code>" . htmlspecialchars($site['unifi_controller_url']) . "</code><br>";
echo "Site ID: <code>" . htmlspecialchars($site['site_id']) . "</code><br>";
echo "Username: <code>" . htmlspecialchars($site['unifi_username']) . "</code><br>";
echo "<br>";
// --- Raw Login Test ---
echo "<strong>Login-Test (raw cURL):</strong><br>";
$cookieFile = tempnam(sys_get_temp_dir(), 'UNIFI_TEST_');
$csrfToken = null;
$controllerUrl = rtrim($site['unifi_controller_url'], '/');
$ch = curl_init();
$responseHeaders = [];
curl_setopt_array($ch, [
CURLOPT_URL => $controllerUrl . "/api/auth/login",
CURLOPT_POST => true,
CURLOPT_POSTFIELDS => json_encode([
'username' => $site['unifi_username'],
'password' => $site['unifi_password']
]),
CURLOPT_RETURNTRANSFER => true,
CURLOPT_SSL_VERIFYPEER => false,
CURLOPT_COOKIEJAR => $cookieFile,
CURLOPT_COOKIEFILE => $cookieFile,
CURLOPT_TIMEOUT => 10,
CURLOPT_CONNECTTIMEOUT => 5,
CURLOPT_FOLLOWLOCATION => false,
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
'Origin: ' . $controllerUrl,
'Referer: ' . $controllerUrl . '/login',
],
CURLOPT_HEADERFUNCTION => function($ch, $header) use (&$csrfToken, &$responseHeaders) {
$responseHeaders[] = rtrim($header);
$parts = explode(':', $header, 2);
if (count($parts) === 2 && strtolower(trim($parts[0])) === 'x-csrf-token') {
$csrfToken = trim($parts[1]);
}
return strlen($header);
}
]);
$body = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$curlErr = curl_error($ch);
$info = curl_getinfo($ch);
curl_close($ch);
if ($curlErr) {
echo "✗ cURL Fehler: " . htmlspecialchars($curlErr) . "<br>";
} else {
$icon = ($httpCode === 200) ? '✓' : '✗';
echo "$icon HTTP Code: <strong>$httpCode</strong><br>";
echo "Effective URL: <code>" . htmlspecialchars($info['url']) . "</code><br>";
}
// Response headers
echo "<br><strong>Response-Header:</strong><pre style='background:#f4f4f4;padding:8px;font-size:12px'>";
foreach ($responseHeaders as $h) {
if ($h !== '') echo htmlspecialchars($h) . "\n";
}
echo "</pre>";
// CSRF token
if ($csrfToken !== null) {
echo "✓ X-CSRF-Token aus Header: <code>" . htmlspecialchars($csrfToken) . "</code><br>";
} else {
echo "✗ Kein X-CSRF-Token im Login-Response-Header gefunden<br>";
// Check cookie file fallback
if (file_exists($cookieFile)) {
$tokenFromCookie = null;
foreach (file($cookieFile) as $line) {
$line = trim($line);
if ($line === '' || $line[0] === '#') continue;
$parts = explode("\t", $line);
if (count($parts) >= 7 && strtoupper($parts[5]) === 'TOKEN') {
$tokenFromCookie = $parts[6];
}
}
if ($tokenFromCookie) {
echo "✓ CSRF-Token aus Cookie-Datei (Fallback): <code>" . htmlspecialchars($tokenFromCookie) . "</code><br>";
$csrfToken = $tokenFromCookie;
} else {
echo "✗ Auch kein TOKEN-Cookie in der Cookie-Datei gefunden<br>";
}
}
}
// Response body
echo "<br><strong>Login Response Body:</strong><pre style='background:#f4f4f4;padding:8px;font-size:12px;max-height:200px;overflow:auto'>";
echo htmlspecialchars(substr($body, 0, 2000));
echo "</pre>";
// Cookie file contents
if (file_exists($cookieFile)) {
$cookieContents = file_get_contents($cookieFile);
echo "<strong>Cookie-Datei:</strong><pre style='background:#f4f4f4;padding:8px;font-size:12px'>";
echo htmlspecialchars($cookieContents ?: '(leer — TOKEN hat Partitioned-Attribut, libcurl schreibt es nicht in die Jar-Datei)');
echo "</pre>";
}
// Extract TOKEN from Set-Cookie header (the fix for Partitioned cookie issue)
$tokenCookie = null;
foreach ($responseHeaders as $h) {
if (stripos($h, 'set-cookie:') === 0) {
$cookieVal = trim(substr($h, strlen('set-cookie:')));
$cookieParts = explode(';', $cookieVal);
$first = trim($cookieParts[0]);
if (strpos($first, 'TOKEN=') === 0) {
$tokenCookie = $first;
}
}
}
if ($tokenCookie) {
echo "✓ TOKEN aus Set-Cookie-Header extrahiert: <code>" . htmlspecialchars(substr($tokenCookie, 0, 40)) . "…</code><br>";
} else {
echo "✗ TOKEN nicht in Set-Cookie-Header gefunden<br>";
}
// --- API Test (only if login succeeded) ---
if ($httpCode === 200) {
echo "<br><strong>API-Test (stat/voucher GET) — mit extrahiertem Cookie:</strong><br>";
$apiHeaders = ['Content-Type: application/json'];
if ($csrfToken !== null) {
$apiHeaders[] = 'X-CSRF-Token: ' . $csrfToken;
}
$ch2 = curl_init();
$apiOpts = [
CURLOPT_URL => $controllerUrl . "/proxy/network/api/s/" . $site['site_id'] . "/stat/voucher",
CURLOPT_HTTPGET => true,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_SSL_VERIFYPEER => false,
CURLOPT_TIMEOUT => 10,
CURLOPT_CONNECTTIMEOUT => 5,
CURLOPT_HTTPHEADER => $apiHeaders,
];
if ($tokenCookie !== null) {
$apiOpts[CURLOPT_COOKIE] = $tokenCookie;
} else {
$apiOpts[CURLOPT_COOKIEFILE] = $cookieFile;
}
curl_setopt_array($ch2, $apiOpts);
$apiBody = curl_exec($ch2);
$apiCode = curl_getinfo($ch2, CURLINFO_HTTP_CODE);
$apiErr = curl_error($ch2);
curl_close($ch2);
if ($apiErr) {
echo "✗ cURL Fehler: " . htmlspecialchars($apiErr) . "<br>";
} else {
$icon2 = ($apiCode === 200) ? '✓' : '✗';
echo "$icon2 HTTP Code: <strong>$apiCode</strong><br>";
}
echo "<strong>API Response Body:</strong><pre style='background:#f4f4f4;padding:8px;font-size:12px;max-height:200px;overflow:auto'>";
echo htmlspecialchars(substr($apiBody, 0, 2000));
echo "</pre>";
}
@unlink($cookieFile);
}
} catch (Exception $e) {
echo "✗ Diagnose-Fehler: " . htmlspecialchars($e->getMessage()) . "<br>";
}
echo "<hr>";
echo "<h2>✓ Test abgeschlossen</h2>";
echo "<p><a href='login.php'>Zum Login</a> | <a href='index.php'>Zur Startseite</a></p>";