fix: add safe clock diagnostics to debug reports

2026-08-24 09:53:16 +03:30
parent 656fc907a9
commit 322f484144
6 changed files with 282 additions and 24 deletions
@@ -20,11 +20,16 @@ if (!function_exists('mahak_debug_enabled')) {
 }

 if (!function_exists('mahak_render_error')) {
-    function mahak_render_error(\Throwable $exception, int $status = 500, string $fallbackView = 'server-error'): void
+    function mahak_render_error(
+        \Throwable $exception,
+        int $status = 500,
+        string $fallbackView = 'server-error',
+        array $context = []
+    ): void
    {
        if (mahak_debug_enabled()) {
            wp_die(
-                view('debug-error', ['exception' => $exception]),
+                view('debug-error', ['report' => mahak_build_debug_report($exception, $context)]),
                'Mahak Authentication Error',
                ['response' => $status]
            );
@@ -34,6 +39,135 @@ if (!function_exists('mahak_render_error')) {
    }
 }

+if (!function_exists('mahak_build_debug_report')) {
+    function mahak_build_debug_report(\Throwable $exception, array $context = []): array
+    {
+        $now = time();
+        $wordpressTimezone = function_exists('wp_timezone_string')
+            ? wp_timezone_string()
+            : (string) get_option('timezone_string', '');
+
+        if ($wordpressTimezone === '') {
+            $wordpressTimezone = 'UTC offset '.(string) get_option('gmt_offset', 0);
+        }
+
+        $server = [
+            'Unix timestamp' => (string) $now,
+            'UTC time' => gmdate('Y-m-d H:i:s \U\T\C', $now),
+            'PHP local time' => date('Y-m-d H:i:s P T', $now),
+            'PHP timezone' => date_default_timezone_get(),
+            'PHP date.timezone' => (string) (ini_get('date.timezone') ?: '[not set]'),
+            'WordPress timezone' => $wordpressTimezone,
+            'WordPress version' => get_bloginfo('version'),
+            'PHP version' => PHP_VERSION,
+            'Plugin version' => defined('MAHAK_AUTHENTICATE_BRIDGE_VERSION')
+                ? MAHAK_AUTHENTICATE_BRIDGE_VERSION
+                : '[unknown]',
+        ];
+
+        $jwtTimestamps = [];
+
+        foreach (($context['jwt_timestamps'] ?? []) as $claim => $value) {
+            $jwtTimestamps[strtoupper((string) $claim)] = mahak_format_jwt_timestamp((string) $value, $now);
+        }
+
+        $trace = mahak_sanitized_exception_trace($exception);
+        $exceptionData = [
+            'Type' => get_class($exception),
+            'Message' => $exception->getMessage(),
+            'Location' => $exception->getFile().':'.$exception->getLine(),
+        ];
+
+        $markdown = "# Mahak Authentication Error\n\n## Exception\n\n";
+
+        foreach ($exceptionData as $label => $value) {
+            $markdown .= '- '.$label.': `'.mahak_markdown_value($value)."`\n";
+        }
+
+        $markdown .= "\n## WordPress server diagnostics\n\n| Field | Value |\n|---|---|\n";
+
+        foreach ($server as $label => $value) {
+            $markdown .= '| '.mahak_markdown_value($label).' | `'.mahak_markdown_value($value)."` |\n";
+        }
+
+        $markdown .= "\n## JWT timing claims\n\n";
+
+        if ($jwtTimestamps === []) {
+            $markdown .= "No readable JWT timing claims were available.\n";
+        } else {
+            $markdown .= "| Claim | Value |\n|---|---|\n";
+
+            foreach ($jwtTimestamps as $label => $value) {
+                $markdown .= '| '.mahak_markdown_value($label).' | `'.mahak_markdown_value($value)."` |\n";
+            }
+        }
+
+        $markdown .= "\n## Sanitized stack trace\n\n```text\n".str_replace('```', "'''", $trace)."\n```\n";
+        $markdown .= "\n> JWT contents, request parameters, and function arguments are intentionally omitted.\n";
+
+        return [
+            'exception' => $exceptionData,
+            'server' => $server,
+            'jwt_timestamps' => $jwtTimestamps,
+            'trace' => $trace,
+            'markdown' => $markdown,
+        ];
+    }
+}
+
+if (!function_exists('mahak_format_jwt_timestamp')) {
+    function mahak_format_jwt_timestamp(string $value, int $serverNow): string
+    {
+        if (!is_numeric($value)) {
+            return $value.' (not numeric)';
+        }
+
+        $numericValue = (float) $value;
+        $note = '';
+
+        if (is_infinite($numericValue) || is_nan($numericValue)) {
+            return $value.' (invalid numeric value)';
+        }
+
+        if (abs($numericValue) >= 100000000000) {
+            $numericValue /= 1000;
+            $note = '; appears to use milliseconds';
+        }
+
+        $timestamp = (int) $numericValue;
+        $difference = $timestamp - $serverNow;
+        $differenceLabel = ($difference >= 0 ? '+' : '').$difference.' seconds vs server';
+
+        return $value.' ('.gmdate('Y-m-d H:i:s \U\T\C', $timestamp).'; '.$differenceLabel.$note.')';
+    }
+}
+
+if (!function_exists('mahak_sanitized_exception_trace')) {
+    function mahak_sanitized_exception_trace(\Throwable $exception): string
+    {
+        $lines = [];
+
+        foreach ($exception->getTrace() as $index => $frame) {
+            $location = isset($frame['file'])
+                ? $frame['file'].':'.($frame['line'] ?? '?')
+                : '[internal function]';
+            $call = ($frame['class'] ?? '').($frame['type'] ?? '').($frame['function'] ?? '[unknown]').'()';
+            $lines[] = '#'.$index.' '.$location.' '.$call;
+        }
+
+        $lines[] = '#'.count($lines).' {main}';
+
+        return implode("\n", $lines);
+    }
+}
+
+if (!function_exists('mahak_markdown_value')) {
+    function mahak_markdown_value(string $value): string
+    {
+        return str_replace(["\r", "\n", '|', '`'], [' ', ' ', '\\|', "'"], $value);
+    }
+}
+
 if (!function_exists('dd')) {
    function dd(): void
    {