From 013da276fb2180c5263bd8d9194e85eeaf2b5ef2 Mon Sep 17 00:00:00 2001
From: "CHIEFSOFT\\ameye" <ameye@chiefsfot.com>
Date: Fri, 13 Jun 2025 22:40:42 -0400
Subject: [PATCH] back office gate

---
 www-api/app/Config/RoutesV1.php        |  3 +
 www-api/app/Controllers/BackOffice.php | 85 ++++++++++++++++++++++++++
 2 files changed, 88 insertions(+)
 create mode 100644 www-api/app/Controllers/BackOffice.php

diff --git a/www-api/app/Config/RoutesV1.php b/www-api/app/Config/RoutesV1.php
index 36d4370e..9928914b 100644
--- a/www-api/app/Config/RoutesV1.php
+++ b/www-api/app/Config/RoutesV1.php
@@ -7,6 +7,9 @@ $routes->get('/', 'Home::index');
 
 $routes->get('/en/wrench/api/v1/test','Home::test');
 
+$routes->get('/backoffice/svs/bko','BackOffice::backofficegate');
+$routes->post('/backoffice/svs/bko','BackOffice::backofficegate');
+
 
 $routes->post('/en/wrench/api/v1/promoverify',          'Promo::promoVerify');
 
diff --git a/www-api/app/Controllers/BackOffice.php b/www-api/app/Controllers/BackOffice.php
new file mode 100644
index 00000000..b19ad9f4
--- /dev/null
+++ b/www-api/app/Controllers/BackOffice.php
@@ -0,0 +1,85 @@
+<?php
+
+namespace App\Controllers;
+
+use CodeIgniter\API\ResponseTrait;
+
+class BackOffice extends BaseController
+{
+    use ResponseTrait;
+    protected $request;
+
+    public function index()
+    {
+        return '';
+    }
+
+    public function backofficegate()
+    {
+        log_message('critical', "Back Office Call 0001");
+
+        $call_backend =  true; // sometimes we need to overwite the call to the extenstion API
+        $local_out = [];       // use local out to send output when the result is not from the extenstion
+        $ret = -1;
+
+
+        header("Access-Control-Allow-Origin: *");
+        header("Access-Control-Expose-Headers: Access-Control-Allow-Origin");
+        header("Access-Control-Allow-Headers: Cache-Control, Pragma, Origin, Authorization, Content-Type, X-Requested-With");
+        header("Access-Control-Allow-Methods: POST, GET, PUT, DELETE, OPTIONS");
+        header('Content-type: application/json');
+
+        if ("OPTIONS" === $_SERVER['REQUEST_METHOD']) {
+            exit();
+        }
+
+        $endpoint = strtolower(str_replace('/svs/bko/', '', strtok($_SERVER['REQUEST_URI'], '?')));
+
+        $id = 0; // update, get & delete actions require ID
+        if (substr($endpoint, 0, 19) == 'gettransportrequest' || substr($endpoint, 0, 13) == 'updateprofile') {
+            $endpoint = strtok($endpoint, '/');
+            $id = strtok('/');
+        }
+
+        if (!isset($endpoints[$endpoint])) {
+            header('HTTP/1.1 400 Bad Request');
+            header('Status: 400 Bad Request');
+            echo "{\"status\":\"Invalid endpoint url WRB\"}";
+            exit();
+        }
+
+        $methods = $endpoints[$endpoint];
+
+        if (array_search($_SERVER['REQUEST_METHOD'], $methods) === false) {
+            header('HTTP/1.1 405 Method Not Allowed');
+            header('Status: 405 Method Not Allowed');
+            echo "{\"status\":\"Invalid request method\"}";
+            exit();
+        }
+
+        if ($_SERVER["REQUEST_METHOD"] == "POST") {
+            $in = flatten(json_decode(file_get_contents('php://input'), true));
+        }
+        if ($_SERVER["REQUEST_METHOD"] == "PUT") {
+            parse_str(file_get_contents('php://input'), $in);
+        }
+        if ($_SERVER["REQUEST_METHOD"] == "GET") {
+            $in = $_GET;
+        }
+        $in["loc"] = $_SERVER["REMOTE_ADDR"];
+        switch ($endpoint) {
+            case 'generics':
+                break;
+        }
+
+
+        $in["pid"] = 100;
+
+
+        $ret = $this->wrenchboard->wrenchboard_api($in, $out);
+        $out['internal_return'] = $ret;
+
+        return $this->respond($this->summaryReturnData($in,$out,[]), 200);
+    }
+
+}