From 5785d3cd0563cd00626229d69728818437126e2c Mon Sep 17 00:00:00 2001
From: Wrongecho <wrongecho@itflow.org>
Date: Fri, 4 Sep 2026 13:03:34 +0000
Subject: [PATCH] Credentials API - Add archive, unarchive and delete endpoints

---
 api/v1/credentials/archive.php   | 44 ++++++++++++++++++++++++++++++++
 api/v1/credentials/delete.php    | 30 ++++++++++++++++++++++
 api/v1/credentials/unarchive.php | 42 ++++++++++++++++++++++++++++++
 3 files changed, 116 insertions(+)
 create mode 100644 api/v1/credentials/archive.php
 create mode 100644 api/v1/credentials/delete.php
 create mode 100644 api/v1/credentials/unarchive.php

diff --git a/api/v1/credentials/archive.php b/api/v1/credentials/archive.php
new file mode 100644
index 000000000..a607bf0e9
--- /dev/null
+++ b/api/v1/credentials/archive.php
@@ -0,0 +1,44 @@
+<?php
+
+require_once '../validate_api_key.php';
+require_once '../require_post_method.php';
+
+// Parse ID
+$credential_id = intval($_POST['credential_id']);
+
+// Default
+$update_count = false;
+
+if (!empty($credential_id)) {
+
+    // Fetch credential info
+    $row = mysqli_fetch_assoc(mysqli_query($mysqli, "
+        SELECT credential_name, credential_client_id
+        FROM credentials
+        WHERE credential_id = $credential_id AND credential_client_id = $client_id AND credential_archived_at IS NULL
+        LIMIT 1
+    "));
+
+    if ($row) {
+
+        $credential_name = escapeSql($row['credential_name']);
+
+        // Archive credential
+        $update_sql = mysqli_query($mysqli, "
+            UPDATE credentials SET
+            credential_favorite = 0,
+            credential_archived_at = NOW()
+            WHERE credential_id = $credential_id AND credential_client_id = $client_id
+        ");
+
+        if ($update_sql) {
+            $update_count = mysqli_affected_rows($mysqli);
+
+            // Logging
+            logAudit("Credential", "Archive", "$credential_name archived via API ($api_key_name)", $client_id, $credential_id);
+        }
+    }
+}
+
+// Output
+require_once '../update_output.php';
diff --git a/api/v1/credentials/delete.php b/api/v1/credentials/delete.php
new file mode 100644
index 000000000..b53e3cd23
--- /dev/null
+++ b/api/v1/credentials/delete.php
@@ -0,0 +1,30 @@
+<?php
+
+require_once '../validate_api_key.php';
+
+require_once '../require_post_method.php';
+
+
+// Parse ID
+$credential_id = intval($_POST['credential_id']);
+
+// Default
+$delete_count = false;
+
+if (!empty($credential_id)) {
+	$row = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT credential_name FROM credentials WHERE credential_id = $credential_id AND credential_client_id = $client_id AND credential_archived_at IS NOT NULL LIMIT 1"));
+	$credential_name = escapeSql($row['credential_name'] ?? '');
+
+	$delete_sql = mysqli_query($mysqli, "DELETE FROM credentials WHERE credential_id = $credential_id AND credential_client_id = $client_id AND credential_archived_at IS NOT NULL LIMIT 1");
+
+	// Check delete & get affected rows
+	if ($delete_sql && !empty($credential_name)) {
+		$delete_count = mysqli_affected_rows($mysqli);
+
+		// Logging
+		logAudit("Credential", "Delete", "$credential_name via API ($api_key_name)", $client_id, $credential_id);
+	}
+}
+
+// Output
+require_once '../delete_output.php';
diff --git a/api/v1/credentials/unarchive.php b/api/v1/credentials/unarchive.php
new file mode 100644
index 000000000..edb98eaa9
--- /dev/null
+++ b/api/v1/credentials/unarchive.php
@@ -0,0 +1,42 @@
+<?php
+
+require_once '../validate_api_key.php';
+require_once '../require_post_method.php';
+
+// Parse ID
+$credential_id = intval($_POST['credential_id']);
+
+// Default
+$update_count = false;
+
+if (!empty($credential_id)) {
+
+    // Fetch credential info
+    $row = mysqli_fetch_assoc(mysqli_query($mysqli, "
+        SELECT credential_name, credential_client_id
+        FROM credentials
+        WHERE credential_id = $credential_id AND credential_client_id = $client_id AND credential_archived_at IS NOT NULL
+        LIMIT 1
+    "));
+
+    if ($row) {
+
+        $credential_name = escapeSql($row['credential_name']);
+
+        // Unarchive credential
+        $update_sql = mysqli_query($mysqli, "
+            UPDATE credentials SET credential_archived_at = NULL
+            WHERE credential_id = $credential_id AND credential_client_id = $client_id
+        ");
+
+        if ($update_sql) {
+            $update_count = mysqli_affected_rows($mysqli);
+
+            // Logging
+            logAudit("Credential", "Unarchive", "$credential_name unarchived via API ($api_key_name)", $client_id, $credential_id);
+        }
+    }
+}
+
+// Output
+require_once '../update_output.php';