// Get AWS DynamoDB Client

$dbClient = DynamoDBClient::factory(array(

'region' => 'us-west-2'

));

// Make insert into errors table in database

$errorDate = new DateTime();

$dbClient->putItem(array(

'TableName' => 'errors',

'Item' => array(

'errorId' => array('S' => uniqid()), // Primary Key

'errorDate' => array('N' => $errorDate->getTimestamp()), // Range Key

'errorType' => array('S' => $errorType),

'message' => array('S' => $e->getMessage()),

'code' => array('N' => $e->getCode()),

'fileName' => array('S' => $e->getFile()),

'line' => array('N' => $e->getLine())

)

));

echo json_encode(array('message' => 'error'));

// The old token should be sent in request header

$token = $app->request->headers->get('X-Authorization');

$app->response->headers->set('Content-Type', 'application/json');

// If the user had a token in their local storage, refresh it and send the new one back.

if (isset($token) && $token !== 'invalid') {

// Get email, expiration timestamp, and signature from old token

$oldToken = explode(':', $token);

$email = $oldToken[0];

$expirationTimestamp = $oldToken[1];

$givenSignature = $oldToken[2];

// Setup dates to check if token is expired

$currentDate = new DateTime();

$expirationDate = new DateTime();

$expirationDate->setTimestamp(intval($expirationTimestamp));

// Setup expected signature for purposes of comparison.

$rawToken = $email . ':' . $expirationTimestamp;

$expectedSignature = hash_hmac('ripemd160', $rawToken, getenv('notellosecret'));

if ($currentDate >= $expirationDate) {

// The token is expired

$app->response->setStatus(403);

$app->response->setBody(json_encode(array('message' => 'Forbidden')));

} else if (md5($givenSignature) === md5($expectedSignature)) {

// All is well and we can finally refresh the auth token

$newRawToken = $email . ':' . strtotime('+7 days');

$newSignature = hash_hmac('ripemd160', $newRawToken, getenv('notellosecret'));

$newAuthToken = $newRawToken . ':' . $newSignature;

$app->response->headers->set('X-Authorization', $newAuthToken);

return true;

} else {

// The token is invalid and has probably been tampered with

$app->response->setBody(json_encode(array('token' => 'InvalidToken')));

}

} else {

$app->response->setStatus(403);

$app->response->setBody(json_encode(array('message' => 'Forbidden')));

}

if (isset($userNotes)) {

foreach ($userNotes as $userNoteKey => $userNoteValue) {

if (isset($userNoteValue['itemType']) && $userNoteValue['itemType'] === 'notebook' && !isset($userNoteValue['notebookId'])) {

$userNotes[$userNoteKey]['notebookId'] = uniqid();

$userNotes[$userNoteKey]['notes'] = hydrateId($userNoteValue['notes']);

}

if (isset($userNoteValue['itemType']) && $userNoteValue['itemType'] === 'box' && !isset($userNoteValue['boxId'])) {

$userNotes[$userNoteKey]['boxId'] = uniqid();

}

if (isset($userNoteValue['itemType']) && $userNoteValue['itemType'] === 'note' && !isset($userNoteValue['noteId'])) {

$userNotes[$userNoteKey]['noteId'] = uniqid();

}

}

unset($userNoteValue);

} else {

$userNotes = array();

}

return $userNotes;