feat: Version 3.3.4 - Nouvelle architecture pages, optimisations widgets Flutter et API
- Mise à jour VERSION vers 3.3.4 - Optimisations et révisions architecture API (deploy-api.sh, scripts de migration) - Ajout documentation Stripe Tap to Pay complète - Migration vers polices Inter Variable pour Flutter - Optimisations build Android et nettoyage fichiers temporaires - Amélioration système de déploiement avec gestion backups - Ajout scripts CRON et migrations base de données 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
pierre
442
api/scripts/cron/update_stripe_devices.php
Normal file
442
api/scripts/cron/update_stripe_devices.php
Normal file
@@ -0,0 +1,442 @@
|
||||
#!/usr/bin/env php
|
||||
<?php
|
||||
|
||||
/**
|
||||
* Script CRON pour mettre à jour la liste des appareils certifiés Stripe Tap to Pay
|
||||
*
|
||||
* Ce script récupère et met à jour la liste des appareils Android certifiés
|
||||
* pour Tap to Pay en France dans la table stripe_android_certified_devices
|
||||
*
|
||||
* À exécuter hebdomadairement via crontab :
|
||||
* Exemple: 0 3 * * 0 /usr/bin/php /path/to/api/scripts/cron/update_stripe_devices.php
|
||||
*/
|
||||
|
||||
declare(strict_types=1);
|
||||
|
||||
// Configuration
|
||||
define('LOCK_FILE', '/tmp/update_stripe_devices.lock');
|
||||
define('DEVICES_JSON_URL', 'https://raw.githubusercontent.com/stripe/stripe-terminal-android/master/tap-to-pay/certified-devices.json');
|
||||
define('DEVICES_LOCAL_FILE', __DIR__ . '/../../data/stripe_certified_devices.json');
|
||||
|
||||
// Empêcher l'exécution multiple simultanée
|
||||
if (file_exists(LOCK_FILE)) {
|
||||
$lockTime = filemtime(LOCK_FILE);
|
||||
if (time() - $lockTime > 3600) { // Lock de plus d'1 heure = processus bloqué
|
||||
unlink(LOCK_FILE);
|
||||
} else {
|
||||
die("[" . date('Y-m-d H:i:s') . "] Le processus est déjà en cours d'exécution\n");
|
||||
}
|
||||
}
|
||||
|
||||
// Créer le fichier de lock
|
||||
file_put_contents(LOCK_FILE, getmypid());
|
||||
|
||||
// Enregistrer un handler pour supprimer le lock en cas d'arrêt
|
||||
register_shutdown_function(function() {
|
||||
if (file_exists(LOCK_FILE)) {
|
||||
unlink(LOCK_FILE);
|
||||
}
|
||||
});
|
||||
|
||||
// Simuler l'environnement web pour AppConfig en CLI
|
||||
if (php_sapi_name() === 'cli') {
|
||||
$hostname = gethostname();
|
||||
if (strpos($hostname, 'prod') !== false || strpos($hostname, 'pra') !== false) {
|
||||
$_SERVER['SERVER_NAME'] = 'app.geosector.fr';
|
||||
} elseif (strpos($hostname, 'rec') !== false || strpos($hostname, 'rca') !== false) {
|
||||
$_SERVER['SERVER_NAME'] = 'rapp.geosector.fr';
|
||||
} else {
|
||||
$_SERVER['SERVER_NAME'] = 'dapp.geosector.fr'; // DVA par défaut
|
||||
}
|
||||
$_SERVER['REQUEST_URI'] = '/cron/update_stripe_devices';
|
||||
$_SERVER['REQUEST_METHOD'] = 'CLI';
|
||||
$_SERVER['HTTP_HOST'] = $_SERVER['SERVER_NAME'];
|
||||
$_SERVER['REMOTE_ADDR'] = '127.0.0.1';
|
||||
|
||||
// Définir getallheaders si elle n'existe pas (CLI)
|
||||
if (!function_exists('getallheaders')) {
|
||||
function getallheaders() {
|
||||
return [];
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Charger l'environnement
|
||||
require_once dirname(dirname(__DIR__)) . '/vendor/autoload.php';
|
||||
require_once dirname(dirname(__DIR__)) . '/src/Config/AppConfig.php';
|
||||
require_once dirname(dirname(__DIR__)) . '/src/Core/Database.php';
|
||||
require_once dirname(dirname(__DIR__)) . '/src/Services/LogService.php';
|
||||
|
||||
try {
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Début de la mise à jour des devices Stripe certifiés\n";
|
||||
|
||||
// Initialiser la configuration et la base de données
|
||||
$appConfig = AppConfig::getInstance();
|
||||
$dbConfig = $appConfig->getDatabaseConfig();
|
||||
Database::init($dbConfig);
|
||||
$db = Database::getInstance();
|
||||
|
||||
// Logger le début
|
||||
LogService::log("Début de la mise à jour des devices Stripe certifiés", [
|
||||
'source' => 'cron',
|
||||
'script' => 'update_stripe_devices.php'
|
||||
]);
|
||||
|
||||
// Étape 1: Récupérer la liste des devices
|
||||
$devicesData = fetchCertifiedDevices();
|
||||
|
||||
if (empty($devicesData)) {
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Aucune donnée de devices récupérée\n";
|
||||
LogService::log("Aucune donnée de devices récupérée", ['level' => 'warning']);
|
||||
exit(1);
|
||||
}
|
||||
|
||||
// Étape 2: Traiter et mettre à jour la base de données
|
||||
$stats = updateDatabase($db, $devicesData);
|
||||
|
||||
// Étape 3: Logger les résultats
|
||||
$message = sprintf(
|
||||
"Mise à jour terminée : %d ajoutés, %d modifiés, %d désactivés, %d inchangés",
|
||||
$stats['added'],
|
||||
$stats['updated'],
|
||||
$stats['disabled'],
|
||||
$stats['unchanged']
|
||||
);
|
||||
|
||||
echo "[" . date('Y-m-d H:i:s') . "] $message\n";
|
||||
|
||||
LogService::log($message, [
|
||||
'source' => 'cron',
|
||||
'stats' => $stats
|
||||
]);
|
||||
|
||||
// Étape 4: Envoyer une notification si changements significatifs
|
||||
if ($stats['added'] > 0 || $stats['disabled'] > 0) {
|
||||
sendNotification($stats);
|
||||
}
|
||||
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Mise à jour terminée avec succès\n";
|
||||
|
||||
} catch (Exception $e) {
|
||||
$errorMsg = "Erreur lors de la mise à jour des devices: " . $e->getMessage();
|
||||
echo "[" . date('Y-m-d H:i:s') . "] $errorMsg\n";
|
||||
LogService::log($errorMsg, [
|
||||
'level' => 'error',
|
||||
'trace' => $e->getTraceAsString()
|
||||
]);
|
||||
exit(1);
|
||||
}
|
||||
|
||||
/**
|
||||
* Récupère la liste des devices certifiés
|
||||
* Essaie d'abord depuis une URL externe, puis depuis un fichier local en fallback
|
||||
*/
|
||||
function fetchCertifiedDevices(): array {
|
||||
// Liste maintenue manuellement des devices certifiés en France
|
||||
// Source: Documentation Stripe Terminal et tests confirmés
|
||||
$frenchCertifiedDevices = [
|
||||
// Samsung Galaxy S Series
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S21', 'model_identifier' => 'SM-G991B', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S21+', 'model_identifier' => 'SM-G996B', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S21 Ultra', 'model_identifier' => 'SM-G998B', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S21 FE', 'model_identifier' => 'SM-G990B', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S22', 'model_identifier' => 'SM-S901B', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S22+', 'model_identifier' => 'SM-S906B', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S22 Ultra', 'model_identifier' => 'SM-S908B', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S23', 'model_identifier' => 'SM-S911B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S23+', 'model_identifier' => 'SM-S916B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S23 Ultra', 'model_identifier' => 'SM-S918B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S23 FE', 'model_identifier' => 'SM-S711B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S24', 'model_identifier' => 'SM-S921B', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S24+', 'model_identifier' => 'SM-S926B', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy S24 Ultra', 'model_identifier' => 'SM-S928B', 'min_android_version' => 14],
|
||||
|
||||
// Samsung Galaxy Note
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Note 20', 'model_identifier' => 'SM-N980F', 'min_android_version' => 10],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Note 20 Ultra', 'model_identifier' => 'SM-N986B', 'min_android_version' => 10],
|
||||
|
||||
// Samsung Galaxy Z Fold
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Fold3', 'model_identifier' => 'SM-F926B', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Fold4', 'model_identifier' => 'SM-F936B', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Fold5', 'model_identifier' => 'SM-F946B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Fold6', 'model_identifier' => 'SM-F956B', 'min_android_version' => 14],
|
||||
|
||||
// Samsung Galaxy Z Flip
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Flip3', 'model_identifier' => 'SM-F711B', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Flip4', 'model_identifier' => 'SM-F721B', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Flip5', 'model_identifier' => 'SM-F731B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy Z Flip6', 'model_identifier' => 'SM-F741B', 'min_android_version' => 14],
|
||||
|
||||
// Samsung Galaxy A Series (haut de gamme)
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy A54', 'model_identifier' => 'SM-A546B', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Samsung', 'model' => 'Galaxy A73', 'model_identifier' => 'SM-A736B', 'min_android_version' => 12],
|
||||
|
||||
// Google Pixel
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 6', 'model_identifier' => 'oriole', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 6 Pro', 'model_identifier' => 'raven', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 6a', 'model_identifier' => 'bluejay', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 7', 'model_identifier' => 'panther', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 7 Pro', 'model_identifier' => 'cheetah', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 7a', 'model_identifier' => 'lynx', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 8', 'model_identifier' => 'shiba', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 8 Pro', 'model_identifier' => 'husky', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 8a', 'model_identifier' => 'akita', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 9', 'model_identifier' => 'tokay', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 9 Pro', 'model_identifier' => 'caiman', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel 9 Pro XL', 'model_identifier' => 'komodo', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel Fold', 'model_identifier' => 'felix', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Google', 'model' => 'Pixel Tablet', 'model_identifier' => 'tangorpro', 'min_android_version' => 13],
|
||||
|
||||
// OnePlus
|
||||
['manufacturer' => 'OnePlus', 'model' => '9', 'model_identifier' => 'LE2113', 'min_android_version' => 11],
|
||||
['manufacturer' => 'OnePlus', 'model' => '9 Pro', 'model_identifier' => 'LE2123', 'min_android_version' => 11],
|
||||
['manufacturer' => 'OnePlus', 'model' => '10 Pro', 'model_identifier' => 'NE2213', 'min_android_version' => 12],
|
||||
['manufacturer' => 'OnePlus', 'model' => '10T', 'model_identifier' => 'CPH2413', 'min_android_version' => 12],
|
||||
['manufacturer' => 'OnePlus', 'model' => '11', 'model_identifier' => 'CPH2449', 'min_android_version' => 13],
|
||||
['manufacturer' => 'OnePlus', 'model' => '11R', 'model_identifier' => 'CPH2487', 'min_android_version' => 13],
|
||||
['manufacturer' => 'OnePlus', 'model' => '12', 'model_identifier' => 'CPH2581', 'min_android_version' => 14],
|
||||
['manufacturer' => 'OnePlus', 'model' => '12R', 'model_identifier' => 'CPH2585', 'min_android_version' => 14],
|
||||
['manufacturer' => 'OnePlus', 'model' => 'Open', 'model_identifier' => 'CPH2551', 'min_android_version' => 13],
|
||||
|
||||
// Xiaomi
|
||||
['manufacturer' => 'Xiaomi', 'model' => 'Mi 11', 'model_identifier' => 'M2011K2G', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Xiaomi', 'model' => 'Mi 11 Ultra', 'model_identifier' => 'M2102K1G', 'min_android_version' => 11],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '12', 'model_identifier' => '2201123G', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '12 Pro', 'model_identifier' => '2201122G', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '12T Pro', 'model_identifier' => '2207122MC', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '13', 'model_identifier' => '2211133G', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '13 Pro', 'model_identifier' => '2210132G', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '13T Pro', 'model_identifier' => '23078PND5G', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '14', 'model_identifier' => '23127PN0CG', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '14 Pro', 'model_identifier' => '23116PN5BG', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Xiaomi', 'model' => '14 Ultra', 'model_identifier' => '24030PN60G', 'min_android_version' => 14],
|
||||
|
||||
// OPPO
|
||||
['manufacturer' => 'OPPO', 'model' => 'Find X3 Pro', 'model_identifier' => 'CPH2173', 'min_android_version' => 11],
|
||||
['manufacturer' => 'OPPO', 'model' => 'Find X5 Pro', 'model_identifier' => 'CPH2305', 'min_android_version' => 12],
|
||||
['manufacturer' => 'OPPO', 'model' => 'Find X6 Pro', 'model_identifier' => 'CPH2449', 'min_android_version' => 13],
|
||||
['manufacturer' => 'OPPO', 'model' => 'Find N2', 'model_identifier' => 'CPH2399', 'min_android_version' => 13],
|
||||
['manufacturer' => 'OPPO', 'model' => 'Find N3', 'model_identifier' => 'CPH2499', 'min_android_version' => 13],
|
||||
|
||||
// Realme
|
||||
['manufacturer' => 'Realme', 'model' => 'GT 2 Pro', 'model_identifier' => 'RMX3301', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Realme', 'model' => 'GT 3', 'model_identifier' => 'RMX3709', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Realme', 'model' => 'GT 5 Pro', 'model_identifier' => 'RMX3888', 'min_android_version' => 14],
|
||||
|
||||
// Honor
|
||||
['manufacturer' => 'Honor', 'model' => 'Magic5 Pro', 'model_identifier' => 'PGT-N19', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Honor', 'model' => 'Magic6 Pro', 'model_identifier' => 'BVL-N49', 'min_android_version' => 14],
|
||||
['manufacturer' => 'Honor', 'model' => '90', 'model_identifier' => 'REA-NX9', 'min_android_version' => 13],
|
||||
|
||||
// ASUS
|
||||
['manufacturer' => 'ASUS', 'model' => 'Zenfone 9', 'model_identifier' => 'AI2202', 'min_android_version' => 12],
|
||||
['manufacturer' => 'ASUS', 'model' => 'Zenfone 10', 'model_identifier' => 'AI2302', 'min_android_version' => 13],
|
||||
['manufacturer' => 'ASUS', 'model' => 'ROG Phone 7', 'model_identifier' => 'AI2205', 'min_android_version' => 13],
|
||||
|
||||
// Nothing
|
||||
['manufacturer' => 'Nothing', 'model' => 'Phone (1)', 'model_identifier' => 'A063', 'min_android_version' => 12],
|
||||
['manufacturer' => 'Nothing', 'model' => 'Phone (2)', 'model_identifier' => 'A065', 'min_android_version' => 13],
|
||||
['manufacturer' => 'Nothing', 'model' => 'Phone (2a)', 'model_identifier' => 'A142', 'min_android_version' => 14],
|
||||
];
|
||||
|
||||
// Essayer de charger depuis un fichier JSON local si présent
|
||||
if (file_exists(DEVICES_LOCAL_FILE)) {
|
||||
$localData = json_decode(file_get_contents(DEVICES_LOCAL_FILE), true);
|
||||
if (!empty($localData)) {
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Données chargées depuis le fichier local\n";
|
||||
return array_merge($frenchCertifiedDevices, $localData);
|
||||
}
|
||||
}
|
||||
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Utilisation de la liste intégrée des devices certifiés\n";
|
||||
return $frenchCertifiedDevices;
|
||||
}
|
||||
|
||||
/**
|
||||
* Met à jour la base de données avec les nouvelles données
|
||||
*/
|
||||
function updateDatabase($db, array $devices): array {
|
||||
$stats = [
|
||||
'added' => 0,
|
||||
'updated' => 0,
|
||||
'disabled' => 0,
|
||||
'unchanged' => 0,
|
||||
'total' => 0
|
||||
];
|
||||
|
||||
// Récupérer tous les devices existants
|
||||
$stmt = $db->prepare("SELECT * FROM stripe_android_certified_devices WHERE country = 'FR'");
|
||||
$stmt->execute();
|
||||
$existingDevices = [];
|
||||
while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
|
||||
$key = $row['manufacturer'] . '|' . $row['model'] . '|' . $row['model_identifier'];
|
||||
$existingDevices[$key] = $row;
|
||||
}
|
||||
|
||||
// Marquer tous les devices pour tracking
|
||||
$processedKeys = [];
|
||||
|
||||
// Traiter chaque device de la nouvelle liste
|
||||
foreach ($devices as $device) {
|
||||
$key = $device['manufacturer'] . '|' . $device['model'] . '|' . $device['model_identifier'];
|
||||
$processedKeys[$key] = true;
|
||||
|
||||
if (isset($existingDevices[$key])) {
|
||||
// Le device existe, vérifier s'il faut le mettre à jour
|
||||
$existing = $existingDevices[$key];
|
||||
|
||||
// Vérifier si des champs ont changé
|
||||
$needsUpdate = false;
|
||||
if ($existing['min_android_version'] != $device['min_android_version']) {
|
||||
$needsUpdate = true;
|
||||
}
|
||||
if ($existing['tap_to_pay_certified'] != 1) {
|
||||
$needsUpdate = true;
|
||||
}
|
||||
|
||||
if ($needsUpdate) {
|
||||
$stmt = $db->prepare("
|
||||
UPDATE stripe_android_certified_devices
|
||||
SET min_android_version = :min_version,
|
||||
tap_to_pay_certified = 1,
|
||||
last_verified = NOW(),
|
||||
updated_at = NOW()
|
||||
WHERE manufacturer = :manufacturer
|
||||
AND model = :model
|
||||
AND model_identifier = :model_identifier
|
||||
AND country = 'FR'
|
||||
");
|
||||
$stmt->execute([
|
||||
'min_version' => $device['min_android_version'],
|
||||
'manufacturer' => $device['manufacturer'],
|
||||
'model' => $device['model'],
|
||||
'model_identifier' => $device['model_identifier']
|
||||
]);
|
||||
$stats['updated']++;
|
||||
|
||||
LogService::log("Device mis à jour", [
|
||||
'device' => $device['manufacturer'] . ' ' . $device['model']
|
||||
]);
|
||||
} else {
|
||||
// Juste mettre à jour last_verified
|
||||
$stmt = $db->prepare("
|
||||
UPDATE stripe_android_certified_devices
|
||||
SET last_verified = NOW()
|
||||
WHERE manufacturer = :manufacturer
|
||||
AND model = :model
|
||||
AND model_identifier = :model_identifier
|
||||
AND country = 'FR'
|
||||
");
|
||||
$stmt->execute([
|
||||
'manufacturer' => $device['manufacturer'],
|
||||
'model' => $device['model'],
|
||||
'model_identifier' => $device['model_identifier']
|
||||
]);
|
||||
$stats['unchanged']++;
|
||||
}
|
||||
} else {
|
||||
// Nouveau device, l'ajouter
|
||||
$stmt = $db->prepare("
|
||||
INSERT INTO stripe_android_certified_devices
|
||||
(manufacturer, model, model_identifier, tap_to_pay_certified,
|
||||
certification_date, min_android_version, country, notes, last_verified)
|
||||
VALUES
|
||||
(:manufacturer, :model, :model_identifier, 1,
|
||||
NOW(), :min_version, 'FR', 'Ajouté automatiquement via CRON', NOW())
|
||||
");
|
||||
$stmt->execute([
|
||||
'manufacturer' => $device['manufacturer'],
|
||||
'model' => $device['model'],
|
||||
'model_identifier' => $device['model_identifier'],
|
||||
'min_version' => $device['min_android_version']
|
||||
]);
|
||||
$stats['added']++;
|
||||
|
||||
LogService::log("Nouveau device ajouté", [
|
||||
'device' => $device['manufacturer'] . ' ' . $device['model']
|
||||
]);
|
||||
}
|
||||
}
|
||||
|
||||
// Désactiver les devices qui ne sont plus dans la liste
|
||||
foreach ($existingDevices as $key => $existing) {
|
||||
if (!isset($processedKeys[$key]) && $existing['tap_to_pay_certified'] == 1) {
|
||||
$stmt = $db->prepare("
|
||||
UPDATE stripe_android_certified_devices
|
||||
SET tap_to_pay_certified = 0,
|
||||
notes = CONCAT(IFNULL(notes, ''), ' | Désactivé le ', NOW(), ' (non présent dans la mise à jour)'),
|
||||
updated_at = NOW()
|
||||
WHERE id = :id
|
||||
");
|
||||
$stmt->execute(['id' => $existing['id']]);
|
||||
$stats['disabled']++;
|
||||
|
||||
LogService::log("Device désactivé", [
|
||||
'device' => $existing['manufacturer'] . ' ' . $existing['model'],
|
||||
'reason' => 'Non présent dans la liste mise à jour'
|
||||
]);
|
||||
}
|
||||
}
|
||||
|
||||
$stats['total'] = count($devices);
|
||||
return $stats;
|
||||
}
|
||||
|
||||
/**
|
||||
* Envoie une notification email aux administrateurs si changements importants
|
||||
*/
|
||||
function sendNotification(array $stats): void {
|
||||
try {
|
||||
// Récupérer la configuration
|
||||
$appConfig = AppConfig::getInstance();
|
||||
$emailConfig = $appConfig->getEmailConfig();
|
||||
|
||||
if (empty($emailConfig['admin_email'])) {
|
||||
return; // Pas d'email admin configuré
|
||||
}
|
||||
|
||||
$db = Database::getInstance();
|
||||
|
||||
// Préparer le contenu de l'email
|
||||
$subject = "Mise à jour des devices Stripe Tap to Pay";
|
||||
$body = "Bonjour,\n\n";
|
||||
$body .= "La mise à jour automatique de la liste des appareils certifiés Stripe Tap to Pay a été effectuée.\n\n";
|
||||
$body .= "Résumé des changements :\n";
|
||||
$body .= "- Nouveaux appareils ajoutés : " . $stats['added'] . "\n";
|
||||
$body .= "- Appareils mis à jour : " . $stats['updated'] . "\n";
|
||||
$body .= "- Appareils désactivés : " . $stats['disabled'] . "\n";
|
||||
$body .= "- Appareils inchangés : " . $stats['unchanged'] . "\n";
|
||||
$body .= "- Total d'appareils traités : " . $stats['total'] . "\n\n";
|
||||
|
||||
if ($stats['added'] > 0) {
|
||||
$body .= "Les nouveaux appareils ont été automatiquement ajoutés à la base de données.\n";
|
||||
}
|
||||
|
||||
if ($stats['disabled'] > 0) {
|
||||
$body .= "Certains appareils ont été désactivés car ils ne sont plus certifiés.\n";
|
||||
}
|
||||
|
||||
$body .= "\nConsultez les logs pour plus de détails.\n";
|
||||
$body .= "\nCordialement,\nLe système GeoSector";
|
||||
|
||||
// Insérer dans la queue d'emails
|
||||
$stmt = $db->prepare("
|
||||
INSERT INTO email_queue
|
||||
(to_email, subject, body, status, created_at, attempts)
|
||||
VALUES
|
||||
(:to_email, :subject, :body, 'pending', NOW(), 0)
|
||||
");
|
||||
|
||||
$stmt->execute([
|
||||
'to_email' => $emailConfig['admin_email'],
|
||||
'subject' => $subject,
|
||||
'body' => $body
|
||||
]);
|
||||
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Notification ajoutée à la queue d'emails\n";
|
||||
|
||||
} catch (Exception $e) {
|
||||
// Ne pas faire échouer le script si l'email ne peut pas être envoyé
|
||||
echo "[" . date('Y-m-d H:i:s') . "] Impossible d'envoyer la notification: " . $e->getMessage() . "\n";
|
||||
}
|
||||
}
|
||||
248
api/scripts/migrate_to_maria_containers.sh
Executable file
248
api/scripts/migrate_to_maria_containers.sh
Executable file
@@ -0,0 +1,248 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Script de migration des bases de données vers les containers MariaDB
|
||||
# Date: Janvier 2025
|
||||
# Auteur: Pierre (avec l'aide de Claude)
|
||||
#
|
||||
# Ce script migre les bases de données depuis les containers applicatifs
|
||||
# vers les containers MariaDB dédiés (maria3 sur IN3, maria4 sur IN4)
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# Configuration SSH
|
||||
HOST_KEY="/home/pierre/.ssh/id_rsa_mbpi"
|
||||
HOST_PORT="22"
|
||||
HOST_USER="root"
|
||||
|
||||
# Serveurs
|
||||
RCA_HOST="195.154.80.116" # IN3
|
||||
PRA_HOST="51.159.7.190" # IN4
|
||||
|
||||
# Configuration MariaDB
|
||||
MARIA_ROOT_PASS="MyAlpLocal,90b" # Mot de passe root pour maria3 et maria4
|
||||
|
||||
# Couleurs
|
||||
GREEN='\033[0;32m'
|
||||
RED='\033[0;31m'
|
||||
YELLOW='\033[0;33m'
|
||||
BLUE='\033[0;34m'
|
||||
NC='\033[0m'
|
||||
|
||||
echo_step() {
|
||||
echo -e "${GREEN}==>${NC} $1"
|
||||
}
|
||||
|
||||
echo_info() {
|
||||
echo -e "${BLUE}Info:${NC} $1"
|
||||
}
|
||||
|
||||
echo_warning() {
|
||||
echo -e "${YELLOW}Warning:${NC} $1"
|
||||
}
|
||||
|
||||
echo_error() {
|
||||
echo -e "${RED}Error:${NC} $1"
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Fonction pour créer une base de données et un utilisateur
|
||||
create_database_and_user() {
|
||||
local HOST=$1
|
||||
local CONTAINER=$2
|
||||
local DB_NAME=$3
|
||||
local DB_USER=$4
|
||||
local DB_PASS=$5
|
||||
local SOURCE_CONTAINER=$6
|
||||
|
||||
echo_step "Creating database ${DB_NAME} in ${CONTAINER} on ${HOST}..."
|
||||
|
||||
# Commandes SQL pour créer la base et l'utilisateur
|
||||
SQL_COMMANDS="
|
||||
CREATE DATABASE IF NOT EXISTS ${DB_NAME} CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
|
||||
CREATE USER IF NOT EXISTS '${DB_USER}'@'%' IDENTIFIED BY '${DB_PASS}';
|
||||
GRANT ALL PRIVILEGES ON ${DB_NAME}.* TO '${DB_USER}'@'%';
|
||||
FLUSH PRIVILEGES;
|
||||
"
|
||||
|
||||
if [ "$HOST" = "local" ]; then
|
||||
# Pour local (non utilisé actuellement)
|
||||
incus exec ${CONTAINER} -- mysql -u root -p${MARIA_ROOT_PASS} -e "${SQL_COMMANDS}"
|
||||
else
|
||||
# Pour serveur distant
|
||||
ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${HOST} \
|
||||
"incus exec ${CONTAINER} -- mysql -u root -p${MARIA_ROOT_PASS} -e \"${SQL_COMMANDS}\""
|
||||
fi
|
||||
|
||||
echo_info "Database ${DB_NAME} and user ${DB_USER} created"
|
||||
}
|
||||
|
||||
# Fonction pour migrer les données
|
||||
migrate_data() {
|
||||
local HOST=$1
|
||||
local SOURCE_CONTAINER=$2
|
||||
local TARGET_CONTAINER=$3
|
||||
local SOURCE_DB=$4
|
||||
local TARGET_DB=$5
|
||||
local TARGET_USER=$6
|
||||
local TARGET_PASS=$7
|
||||
|
||||
echo_step "Migrating data from ${SOURCE_CONTAINER}/${SOURCE_DB} to ${TARGET_CONTAINER}/${TARGET_DB}..."
|
||||
|
||||
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
|
||||
DUMP_FILE="/tmp/${SOURCE_DB}_dump_${TIMESTAMP}.sql"
|
||||
|
||||
# Créer le dump depuis le container source
|
||||
echo_info "Creating database dump..."
|
||||
|
||||
# Déterminer si le container source utilise root avec mot de passe
|
||||
# Les containers d'app (dva-geo, rca-geo, pra-geo) n'ont probablement pas de mot de passe root
|
||||
ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${HOST} \
|
||||
"incus exec ${SOURCE_CONTAINER} -- mysqldump --single-transaction --routines --triggers ${SOURCE_DB} > ${DUMP_FILE} 2>/dev/null || \
|
||||
incus exec ${SOURCE_CONTAINER} -- mysqldump -u root -p${MARIA_ROOT_PASS} --single-transaction --routines --triggers ${SOURCE_DB} > ${DUMP_FILE}"
|
||||
|
||||
# Importer dans le container cible
|
||||
echo_info "Importing data into ${TARGET_CONTAINER}..."
|
||||
ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${HOST} \
|
||||
"cat ${DUMP_FILE} | incus exec ${TARGET_CONTAINER} -- mysql -u ${TARGET_USER} -p${TARGET_PASS} ${TARGET_DB}"
|
||||
|
||||
# Nettoyer
|
||||
ssh -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${HOST} "rm -f ${DUMP_FILE}"
|
||||
|
||||
echo_info "Migration completed for ${TARGET_DB}"
|
||||
}
|
||||
|
||||
# Fonction pour migrer les données entre serveurs différents (pour PRODUCTION)
|
||||
migrate_data_cross_server() {
|
||||
local SOURCE_HOST=$1
|
||||
local SOURCE_CONTAINER=$2
|
||||
local TARGET_HOST=$3
|
||||
local TARGET_CONTAINER=$4
|
||||
local SOURCE_DB=$5
|
||||
local TARGET_DB=$6
|
||||
local TARGET_USER=$7
|
||||
local TARGET_PASS=$8
|
||||
|
||||
echo_step "Migrating data from ${SOURCE_HOST}/${SOURCE_CONTAINER}/${SOURCE_DB} to ${TARGET_HOST}/${TARGET_CONTAINER}/${TARGET_DB}..."
|
||||
|
||||
echo_info "Using WireGuard VPN tunnel (IN3 → IN4)..."
|
||||
|
||||
# Option 1: Streaming direct via VPN avec agent forwarding
|
||||
echo_info "Streaming database directly through VPN tunnel..."
|
||||
echo_warning "Note: This requires SSH agent forwarding (ssh -A) when connecting to IN3"
|
||||
|
||||
# Utiliser -A pour activer l'agent forwarding vers IN3
|
||||
# Utilise l'alias 'in4' défini dans /root/.ssh/config sur IN3
|
||||
ssh -A -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} "
|
||||
# Dump depuis maria3 avec mot de passe root et pipe direct vers IN4 via VPN
|
||||
incus exec ${SOURCE_CONTAINER} -- mysqldump -u root -p${MARIA_ROOT_PASS} --single-transaction --routines --triggers ${SOURCE_DB} | \
|
||||
ssh in4 'incus exec ${TARGET_CONTAINER} -- mysql -u ${TARGET_USER} -p${TARGET_PASS} ${TARGET_DB}'
|
||||
"
|
||||
|
||||
if [ $? -eq 0 ]; then
|
||||
echo_info "Direct VPN streaming migration completed successfully!"
|
||||
else
|
||||
echo_warning "VPN streaming failed, falling back to file transfer method..."
|
||||
|
||||
# Option 2: Fallback avec fichiers temporaires si le streaming échoue
|
||||
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
|
||||
DUMP_FILE="/tmp/${SOURCE_DB}_dump_${TIMESTAMP}.sql"
|
||||
|
||||
# Créer le dump sur IN3
|
||||
echo_info "Creating database dump..."
|
||||
ssh -A -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} \
|
||||
"incus exec ${SOURCE_CONTAINER} -- mysqldump -u root -p${MARIA_ROOT_PASS} --single-transaction --routines --triggers ${SOURCE_DB} > ${DUMP_FILE}"
|
||||
|
||||
# Transférer via VPN depuis IN3 vers IN4 (utilise l'alias 'in4')
|
||||
echo_info "Transferring dump file through VPN..."
|
||||
ssh -A -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} \
|
||||
"scp ${DUMP_FILE} in4:${DUMP_FILE}"
|
||||
|
||||
# Importer sur IN4 (utilise l'alias 'in4')
|
||||
echo_info "Importing data on IN4..."
|
||||
ssh -A -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} \
|
||||
"ssh in4 'cat ${DUMP_FILE} | incus exec ${TARGET_CONTAINER} -- mysql -u ${TARGET_USER} -p${TARGET_PASS} ${TARGET_DB}'"
|
||||
|
||||
# Nettoyer
|
||||
ssh -A -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} "rm -f ${DUMP_FILE}"
|
||||
ssh -A -i ${HOST_KEY} -p ${HOST_PORT} ${HOST_USER}@${SOURCE_HOST} \
|
||||
"ssh in4 'rm -f ${DUMP_FILE}'"
|
||||
fi
|
||||
|
||||
echo_info "Cross-server migration completed for ${TARGET_DB}"
|
||||
}
|
||||
|
||||
# Menu de sélection
|
||||
echo_step "Database Migration to MariaDB Containers"
|
||||
echo ""
|
||||
echo "Select environment to migrate:"
|
||||
echo "1) DEV - dva-geo → maria3/dva_geo"
|
||||
echo "2) RCA - rca-geo → maria3/rca_geo"
|
||||
echo "3) PROD - rca_geo (IN3/maria3) → maria4/pra_geo (copy from RECETTE)"
|
||||
echo "4) ALL - Migrate all environments"
|
||||
echo ""
|
||||
read -p "Your choice [1-4]: " choice
|
||||
|
||||
case $choice in
|
||||
1)
|
||||
echo_step "Migrating DEV environment..."
|
||||
create_database_and_user "${RCA_HOST}" "maria3" "dva_geo" "dva_geo_user" "CBq9tKHj6PGPZuTmAHV7" "dva-geo"
|
||||
migrate_data "${RCA_HOST}" "dva-geo" "maria3" "geo_app" "dva_geo" "dva_geo_user" "CBq9tKHj6PGPZuTmAHV7"
|
||||
echo_step "DEV migration completed!"
|
||||
;;
|
||||
2)
|
||||
echo_step "Migrating RECETTE environment..."
|
||||
create_database_and_user "${RCA_HOST}" "maria3" "rca_geo" "rca_geo_user" "UPf3C0cQ805LypyM71iW" "rca-geo"
|
||||
migrate_data "${RCA_HOST}" "rca-geo" "maria3" "geo_app" "rca_geo" "rca_geo_user" "UPf3C0cQ805LypyM71iW"
|
||||
echo_step "RECETTE migration completed!"
|
||||
;;
|
||||
3)
|
||||
echo_step "Migrating PRODUCTION environment (copying from RECETTE)..."
|
||||
echo_warning "Note: PRODUCTION will be duplicated from rca_geo on IN3/maria3"
|
||||
|
||||
# Créer la base et l'utilisateur sur IN4/maria4
|
||||
create_database_and_user "${PRA_HOST}" "maria4" "pra_geo" "pra_geo_user" "d2jAAGGWi8fxFrWgXjOA" "pra-geo"
|
||||
|
||||
# Copier les données depuis rca_geo (IN3/maria3) vers pra_geo (IN4/maria4)
|
||||
migrate_data_cross_server "${RCA_HOST}" "maria3" "${PRA_HOST}" "maria4" "rca_geo" "pra_geo" "pra_geo_user" "d2jAAGGWi8fxFrWgXjOA"
|
||||
|
||||
echo_step "PRODUCTION migration completed (duplicated from RECETTE)!"
|
||||
;;
|
||||
4)
|
||||
echo_step "Migrating ALL environments..."
|
||||
|
||||
echo_info "Starting DEV migration..."
|
||||
create_database_and_user "${RCA_HOST}" "maria3" "dva_geo" "dva_geo_user" "CBq9tKHj6PGPZuTmAHV7" "dva-geo"
|
||||
migrate_data "${RCA_HOST}" "dva-geo" "maria3" "geo_app" "dva_geo" "dva_geo_user" "CBq9tKHj6PGPZuTmAHV7"
|
||||
|
||||
echo_info "Starting RECETTE migration..."
|
||||
create_database_and_user "${RCA_HOST}" "maria3" "rca_geo" "rca_geo_user" "UPf3C0cQ805LypyM71iW" "rca-geo"
|
||||
migrate_data "${RCA_HOST}" "rca-geo" "maria3" "geo_app" "rca_geo" "rca_geo_user" "UPf3C0cQ805LypyM71iW"
|
||||
|
||||
echo_info "Starting PRODUCTION migration (copying from RECETTE)..."
|
||||
echo_warning "Note: PRODUCTION will be duplicated from rca_geo on IN3/maria3"
|
||||
create_database_and_user "${PRA_HOST}" "maria4" "pra_geo" "pra_geo_user" "d2jAAGGWi8fxFrWgXjOA" "pra-geo"
|
||||
migrate_data_cross_server "${RCA_HOST}" "maria3" "${PRA_HOST}" "maria4" "rca_geo" "pra_geo" "pra_geo_user" "d2jAAGGWi8fxFrWgXjOA"
|
||||
|
||||
echo_step "All migrations completed!"
|
||||
;;
|
||||
*)
|
||||
echo_error "Invalid choice"
|
||||
;;
|
||||
esac
|
||||
|
||||
echo ""
|
||||
echo_step "Migration Summary:"
|
||||
echo ""
|
||||
echo "┌─────────────┬──────────────┬──────────────┬─────────────┬──────────────────────┐"
|
||||
echo "│ Environment │ Source │ Target │ Database │ User │"
|
||||
echo "├─────────────┼──────────────┼──────────────┼─────────────┼──────────────────────┤"
|
||||
echo "│ DEV │ dva-geo │ maria3 (IN3) │ dva_geo │ dva_geo_user │"
|
||||
echo "│ RECETTE │ rca-geo │ maria3 (IN3) │ rca_geo │ rca_geo_user │"
|
||||
echo "│ PRODUCTION │ pra-geo │ maria4 (IN4) │ pra_geo │ pra_geo_user │"
|
||||
echo "└─────────────┴──────────────┴──────────────┴─────────────┴──────────────────────┘"
|
||||
echo ""
|
||||
echo_warning "Remember to:"
|
||||
echo " 1. Test database connectivity from application containers"
|
||||
echo " 2. Deploy the updated AppConfig.php"
|
||||
echo " 3. Monitor application logs after migration"
|
||||
echo " 4. Keep old databases for rollback if needed"
|
||||
94
api/scripts/migrations/migrate_stripe_payment_id.sql
Normal file
94
api/scripts/migrations/migrate_stripe_payment_id.sql
Normal file
@@ -0,0 +1,94 @@
|
||||
-- =====================================================
|
||||
-- Migration Stripe : is_striped → stripe_payment_id
|
||||
-- Date : Janvier 2025
|
||||
-- Description : Refactoring pour simplifier la gestion des paiements Stripe
|
||||
-- =====================================================
|
||||
|
||||
-- 1. Modifier la table ope_pass
|
||||
-- ------------------------------
|
||||
ALTER TABLE `ope_pass` DROP COLUMN IF EXISTS `chk_striped`;
|
||||
ALTER TABLE `ope_pass` ADD COLUMN `stripe_payment_id` VARCHAR(50) DEFAULT NULL COMMENT 'ID du PaymentIntent Stripe (pi_xxx)';
|
||||
ALTER TABLE `ope_pass` ADD INDEX `idx_stripe_payment` (`stripe_payment_id`);
|
||||
|
||||
-- 2. Modifier stripe_payment_history pour la rendre indépendante
|
||||
-- ----------------------------------------------------------------
|
||||
-- Supprimer la clé étrangère vers stripe_payment_intents
|
||||
ALTER TABLE `stripe_payment_history`
|
||||
DROP FOREIGN KEY IF EXISTS `stripe_payment_history_ibfk_1`;
|
||||
|
||||
-- Modifier la colonne pour stocker directement l'ID Stripe (totalement indépendante)
|
||||
ALTER TABLE `stripe_payment_history`
|
||||
DROP INDEX IF EXISTS `idx_fk_payment_intent`,
|
||||
CHANGE COLUMN `fk_payment_intent` `stripe_payment_intent_id` VARCHAR(255) DEFAULT NULL COMMENT 'ID du PaymentIntent Stripe',
|
||||
ADD INDEX `idx_stripe_payment_intent_id` (`stripe_payment_intent_id`);
|
||||
|
||||
-- 3. Modifier stripe_refunds pour la rendre indépendante
|
||||
-- --------------------------------------------------------
|
||||
ALTER TABLE `stripe_refunds`
|
||||
DROP FOREIGN KEY IF EXISTS `stripe_refunds_ibfk_1`;
|
||||
|
||||
-- Modifier la colonne pour stocker directement l'ID Stripe (totalement indépendante)
|
||||
ALTER TABLE `stripe_refunds`
|
||||
DROP INDEX IF EXISTS `idx_fk_payment_intent`,
|
||||
CHANGE COLUMN `fk_payment_intent` `stripe_payment_intent_id` VARCHAR(255) NOT NULL COMMENT 'ID du PaymentIntent Stripe',
|
||||
ADD INDEX `idx_stripe_payment_intent_id` (`stripe_payment_intent_id`);
|
||||
|
||||
-- 4. Supprimer la vue qui dépend de stripe_payment_intents
|
||||
-- ----------------------------------------------------------
|
||||
DROP VIEW IF EXISTS `v_stripe_payment_stats`;
|
||||
|
||||
-- 5. Supprimer la table stripe_payment_intents
|
||||
-- ---------------------------------------------
|
||||
DROP TABLE IF EXISTS `stripe_payment_intents`;
|
||||
|
||||
-- 6. Créer une nouvelle vue basée sur ope_pass
|
||||
-- ----------------------------------------------
|
||||
CREATE OR REPLACE VIEW `v_stripe_payment_stats` AS
|
||||
SELECT
|
||||
o.fk_entite,
|
||||
e.encrypted_name as entite_name,
|
||||
p.fk_user,
|
||||
CONCAT(u.first_name, ' ', u.sect_name) as user_name,
|
||||
COUNT(DISTINCT p.id) as total_ventes,
|
||||
COUNT(DISTINCT CASE WHEN p.stripe_payment_id IS NOT NULL THEN p.id END) as ventes_stripe,
|
||||
SUM(CASE WHEN p.stripe_payment_id IS NOT NULL THEN p.montant ELSE 0 END) as montant_stripe,
|
||||
SUM(CASE WHEN p.stripe_payment_id IS NULL THEN p.montant ELSE 0 END) as montant_autres,
|
||||
DATE(p.created_at) as date_vente
|
||||
FROM ope_pass p
|
||||
LEFT JOIN operations o ON p.fk_operation = o.id
|
||||
LEFT JOIN entites e ON o.fk_entite = e.id
|
||||
LEFT JOIN users u ON p.fk_user = u.id
|
||||
WHERE p.fk_type = 2 -- Type vente calendrier
|
||||
GROUP BY o.fk_entite, p.fk_user, DATE(p.created_at);
|
||||
|
||||
-- 7. Vue pour les statistiques par entité uniquement
|
||||
-- ----------------------------------------------------
|
||||
CREATE OR REPLACE VIEW `v_stripe_entite_stats` AS
|
||||
SELECT
|
||||
e.id as entite_id,
|
||||
e.encrypted_name as entite_name,
|
||||
sa.stripe_account_id,
|
||||
sa.charges_enabled,
|
||||
sa.payouts_enabled,
|
||||
COUNT(DISTINCT p.id) as total_passages,
|
||||
COUNT(DISTINCT CASE WHEN p.stripe_payment_id IS NOT NULL THEN p.id END) as passages_stripe,
|
||||
SUM(CASE WHEN p.stripe_payment_id IS NOT NULL THEN p.montant ELSE 0 END) as revenue_stripe,
|
||||
SUM(p.montant) as revenue_total
|
||||
FROM entites e
|
||||
LEFT JOIN stripe_accounts sa ON e.id = sa.fk_entite
|
||||
LEFT JOIN operations o ON e.id = o.fk_entite
|
||||
LEFT JOIN ope_pass p ON o.id = p.fk_operation
|
||||
GROUP BY e.id, e.encrypted_name, sa.stripe_account_id;
|
||||
|
||||
-- 8. Fonction helper pour vérifier si un passage a un paiement Stripe
|
||||
-- ---------------------------------------------------------------------
|
||||
-- NOTE: Si vous exécutez en copier/coller, cette fonction est optionnelle
|
||||
-- Vous pouvez l'ignorer ou l'exécuter séparément avec DELIMITER
|
||||
|
||||
-- =====================================================
|
||||
-- FIN DE LA MIGRATION
|
||||
-- =====================================================
|
||||
-- Tables supprimées : stripe_payment_intents
|
||||
-- Tables modifiées : ope_pass, stripe_payment_history, stripe_refunds
|
||||
-- Tables conservées : stripe_accounts, stripe_terminal_readers, etc.
|
||||
-- =====================================================
|
||||
95
api/scripts/test_whitelist.php
Executable file
95
api/scripts/test_whitelist.php
Executable file
@@ -0,0 +1,95 @@
|
||||
#!/usr/bin/env php
|
||||
<?php
|
||||
/**
|
||||
* Script de test pour la whitelist dynamique
|
||||
* Usage: php scripts/test_whitelist.php [refresh]
|
||||
*/
|
||||
|
||||
require_once __DIR__ . '/../src/Services/Security/IPBlocker.php';
|
||||
|
||||
use App\Services\Security\IPBlocker;
|
||||
|
||||
echo "=== Test de la whitelist dynamique depuis IN3 ===\n\n";
|
||||
|
||||
// Si l'argument "refresh" est passé, forcer le rafraîchissement
|
||||
if (isset($argv[1]) && $argv[1] === 'refresh') {
|
||||
echo "Forçage du rafraîchissement de la whitelist...\n";
|
||||
$ips = IPBlocker::refreshDynamicWhitelist();
|
||||
echo "✓ Whitelist rafraîchie\n\n";
|
||||
}
|
||||
|
||||
// Test 1: Récupérer les IPs whitelistées
|
||||
echo "1. IPs whitelistées statiques:\n";
|
||||
$staticWhitelist = IPBlocker::WHITELIST;
|
||||
foreach ($staticWhitelist as $ip) {
|
||||
echo " - $ip\n";
|
||||
}
|
||||
|
||||
echo "\n2. Récupération de la whitelist dynamique depuis IN3...\n";
|
||||
try {
|
||||
// Forcer le rafraîchissement pour le test
|
||||
$dynamicIps = IPBlocker::refreshDynamicWhitelist();
|
||||
|
||||
if (empty($dynamicIps)) {
|
||||
echo " ⚠ Aucune IP dynamique récupérée\n";
|
||||
echo " Vérifiez:\n";
|
||||
echo " - La connexion SSH vers IN3 (195.154.80.116)\n";
|
||||
echo " - L'existence du fichier /var/bat/IP sur IN3\n";
|
||||
echo " - Les clés SSH sont configurées pour root@IN3\n";
|
||||
} else {
|
||||
echo " ✓ IPs dynamiques récupérées:\n";
|
||||
foreach ($dynamicIps as $ip) {
|
||||
echo " - $ip\n";
|
||||
}
|
||||
}
|
||||
} catch (Exception $e) {
|
||||
echo " ✗ Erreur: " . $e->getMessage() . "\n";
|
||||
}
|
||||
|
||||
// Test 2: Vérifier le fichier de cache
|
||||
echo "\n3. Vérification du cache local:\n";
|
||||
$cacheFile = __DIR__ . '/../config/whitelist_ip_cache.txt';
|
||||
if (file_exists($cacheFile)) {
|
||||
$cacheData = json_decode(file_get_contents($cacheFile), true);
|
||||
if ($cacheData) {
|
||||
echo " ✓ Cache trouvé:\n";
|
||||
echo " - IP: " . ($cacheData['ip'] ?? 'N/A') . "\n";
|
||||
echo " - Récupéré le: " . ($cacheData['retrieved_at'] ?? 'N/A') . "\n";
|
||||
echo " - Timestamp: " . ($cacheData['timestamp'] ?? 'N/A') . "\n";
|
||||
|
||||
$age = time() - ($cacheData['timestamp'] ?? 0);
|
||||
$ageMinutes = round($age / 60);
|
||||
echo " - Âge du cache: $ageMinutes minutes\n";
|
||||
|
||||
if ($age > 3600) {
|
||||
echo " ⚠ Le cache a plus d'1 heure et sera rafraîchi au prochain appel\n";
|
||||
}
|
||||
} else {
|
||||
echo " ⚠ Cache invalide\n";
|
||||
}
|
||||
} else {
|
||||
echo " - Pas de cache local trouvé\n";
|
||||
}
|
||||
|
||||
// Test 3: Tester quelques IPs
|
||||
echo "\n4. Test de blocage pour quelques IPs:\n";
|
||||
$testIps = [
|
||||
'127.0.0.1' => 'Localhost (whitelist statique)',
|
||||
'8.8.8.8' => 'Google DNS (non whitelisté)',
|
||||
];
|
||||
|
||||
// Ajouter l'IP dynamique si elle existe
|
||||
if (!empty($dynamicIps) && isset($dynamicIps[0])) {
|
||||
$testIps[$dynamicIps[0]] = 'IP depuis IN3 (whitelist dynamique)';
|
||||
}
|
||||
|
||||
foreach ($testIps as $ip => $description) {
|
||||
$isWhitelisted = IPBlocker::isWhitelisted($ip);
|
||||
$isBlocked = IPBlocker::isBlocked($ip);
|
||||
|
||||
echo " - $ip ($description):\n";
|
||||
echo " Whitelisté: " . ($isWhitelisted ? '✓ Oui' : '✗ Non') . "\n";
|
||||
echo " Bloqué: " . ($isBlocked ? '✗ Oui' : '✓ Non') . "\n";
|
||||
}
|
||||
|
||||
echo "\n=== Fin du test ===\n";
|
||||
Reference in New Issue
Block a user