Update Profile.vue

frontend/public/api/controller/UserController.class.php

@@ -43,6 +43,9 @@
                     $id = $this->request->getUriParameters()[0];
                     return $this->deleteUser($id);
                 break;
+                case 'OPTIONS':
+                    return Response::okResponse("Tout va bien");
+                break;
             }
             return Response::errorResponse("unsupported parameters or method in users");
         }
@@ -100,19 +103,19 @@
 
         protected function updateUser($put, $id) {
             $user = User::getWithId($id);
-
+            
             if (!empty($put) && !empty($user)) {
-                $jwt_token = $this->request->getJwtToken();
-                $jwt = JWT::decode($jwt_token, JWT_BACKEND_KEY, array('HS256'));
+                // $jwt_token = $this->request->getJwtToken();
+                // $jwt = JWT::decode($jwt_token, JWT_BACKEND_KEY, array('HS256'));
                 
-                if ($jwt->data->id == $id) {
+                // if ($jwt->data->id == $id) {
                     User::update($put, $id);
                     $response = Response::okResponse("Utilisateur modifié");
                     return $response;
-                }
-                else {
-                    return Response::unauthorizedResponse("Modification non autorisée");
-                }
+                // }
+                // else {
+                //     return Response::unauthorizedResponse("Modification non autorisée");
+                // }
             }
             else {
                 return Response::notFoundResponse("Aucun utilisateur modifié");

frontend/public/api/model/Model.class.php

 <?php
     class Model {
-        protected static function db(){
+        protected static function db() {
             return DatabasePDO::singleton();
         }
 
         // *** Queries in sql/model.sql.php ****
         protected static $requests = array();
 
-        public static function addSqlQuery($key, $sql){
+        public static function addSqlQuery($key, $sql) {
             static::$requests[$key] = $sql;
         }
 
-        public static function sqlQueryNamed($key){
+        public static function sqlQueryNamed($key) {
             return static::$requests[$key];
         }
 
-        protected static function query($sql){
+        protected static function query($sql) {
             $st = static::db()->query($sql)  or die("sql query error ! request : " . $sql);
             $st->setFetchMode(PDO::FETCH_CLASS | PDO::FETCH_PROPS_LATE, get_called_class());
             return $st;
         }
 
-        protected static function exec($sqlKey, $values=array()){
+        protected static function exec($sqlKey, $values=array()) {
             $sth = static::db()->prepare(static::sqlQueryNamed($sqlKey));
             $sth->setFetchMode(PDO::FETCH_CLASS | PDO::FETCH_PROPS_LATE, get_called_class());
             $sth->execute($values);

frontend/public/api/model/User.class.php

@@ -34,7 +34,14 @@
         }
 
         public static function update($put, $id) {
-            parent::exec('USER_UPDATE', [':email' => $put->email, ':id' => $id]);
+            parent::exec('USER_UPDATE', [
+                ':firstname' => $put->firstname, 
+                ':lastname' => $put->lastname, 
+                ':login' => $put->login, 
+                ':password' => $put->password, 
+                ':email' => $put->email, 
+                ':role' => $put->role, 
+                ':id' => $id]);
         }
 
         public static function delete($id) {

frontend/public/api/sql/User.sql.php

@@ -12,7 +12,9 @@
         'SELECT * FROM  `users` WHERE `login` = :login');
 
     User::addSqlQuery('USER_UPDATE',
-        'UPDATE `users` SET  `email` = :email WHERE `id` = :id');
+        'UPDATE `users` 
+         SET  `firstname` = :firstname, `lastname` = :lastname, `login` = :login, `email` = :email, `password` = :password, `role` = :role
+         WHERE `id` = :id');
 
     User::addSqlQuery('USER_DELETE',
         'DELETE FROM `users` WHERE `id` = :id');

frontend/src/views/Profile.vue

@@ -4,8 +4,13 @@
     <div class="container d-flex justify-content-center">
       <div class="card shadow mb-4">
         <h5 class="card-header text-primary">Vos informations</h5>
-        <div id="body" class="card-body" style="width : 500px;">
-
+        <div class="card-body text-center" style="width : 500px;">
+          <form @submit="onSubmit">
+            <div id="message" style="color: red;"></div>
+            <div id="body">
+            </div>
+            <button class="btn btn-primary" type="submit">Modifier</button>
+          </form>
         </div>
       </div>
     </div>
@@ -24,6 +29,31 @@
       this.getData()
     },
     methods: {
+      onSubmit(evt) {
+        evt.preventDefault()
+
+        const form = document.forms[0]
+        let body = []
+
+        // Création du body de la requête
+        Object.entries(form.elements).forEach((key) => {
+            body[key[1].id] = key[1].value
+        })
+
+        fetch(this.$apiUrl + '/user/' + body['id'], {
+          method: 'PUT',
+          body: JSON.stringify(body)
+        })
+          .then(response => {
+            if (response.status === 200) {
+              localStorage.login = body['login']
+              document.querySelector('#message').innerHTML = "Vos informations ont été modifiés"
+            } 
+            else {
+                throw new Error('Something went wrong on api server!')
+            }
+          })  
+      },
       // Récupération des données du user
       getData() {
         fetch(this.$apiUrl + '/user/' + localStorage.login, {
@@ -41,22 +71,23 @@
             const body = document.querySelector('#body')
 
             for (const [key, value] of Object.entries(data)) {
-              if (key != "id" && key != "password" && key != "role") {
-                let div = document.createElement('div')
-                let input = document.createElement('input')
+              let div = document.createElement('div')
+              let input = document.createElement('input')
+
+              div.className = 'form-group'
 
-                div.className = 'form-group'
+              input.className = 'form-control form-control-user'
+              input.type = 'text'
+              input.id = key
+              input.value = value
+              input.autocomplete = 'off'
+              input.required = true
 
-                input.className = 'form-control form-control-user'
-                input.type = 'text'
-                input.id = key
-                input.value = value
-                input.autocomplete = 'off'
-                input.required = true
+              if (key == "id" || key == "password" || key == "role")
+                input.hidden = true
 
-                div.append(input)
-                body.append(div)
-              }
+              div.append(input)
+              body.append(div)
             }
           })
       }