hcuProfile.data

<?php
/*
 * File: hcuProfile.data
 * Purpose: Handle the CRUD portion of the Profile feature.  Return any requested data
 *            in a JSON format, for the client to display accordingly.
 *
 * NOTE: Update the 2-factor cookie if any component of it changes: username (alias),
 *        password, confidence, e-mail. Only if the cookie already exists, but don't
 *        bother checking if the value changed (just re-generate regardless).
 *
 * Call this script with the following parameters
 *  action - what the client side is requesting.
 *
 *
 * Returns JSON OBJECT.
 */


try {
  // ** SET HOMECU FLAGS
  $serviceShowInfo = false;
  $serviceLoadMenu = false;
  $serviceShowMenu = false;
  $serviceAllowReadonly = true;


  // ** INCLUDE MAIN GLOBAL SCRIPT -- Handles security / global variable values
  // unresolved - hcuService will be returning a status object: e.g. ["homecuErrors":{[{"message":"message1"}...{"message":"messagen"}]}]
  require_once(dirname(__FILE__) . '/../library/hcuService.i');

  $EMAIL_FLAG = GetMsgTxValue('MSGTX_FORCE_EM');

  // ** IMPORT FORM VALUES
  $dms_ok = array( "action"=>"string",
                 "email"=>"string","emailValid"=>"string","egenl"=>"string",
                 "alertEmails"=>"string",
                 "old"=>"string","new1"=>"string",
                 "new2"=>"string","sawhints"=>"string",
                 "security_qst"=>"prefix_s", "security_rsp"=>"prefix_s",
                 "security_curpwd"=>"string", "security_token"=>"string",
                 "security_confidence"=>"string",
                 "security_phones"=>"string",
                 "user_alias"=>"string","user_alias2"=>"string",
                 "account_data"=>"array"
          );


  HCU_ImportVars($HB_ENV, "HCUPOST", $dms_ok);

  header('Content-Type: application/json');

  //get the database connection
  // $dbh is set up

  $logger = $HB_ENV["SYSENV"]["logger"];

  // Need to see if there is a valid device cookie to begin with.  Checking if after changes exist doesn't tell if 1) it doesn't exist or 2) it is modified.
  $usrInfo = GetUserbyName($HB_ENV['dbh'], $HB_ENV['Cu'], $HB_ENV['Cn']);
  $usrDeviceCookieExists = isValidDeviceCookie($HB_ENV['Cu'], $usrInfo);

/*
  // ** First check the refer script -- make sure coming from right place
  $parseRefer = parse_url($_SERVER['HTTP_REFERER']);
  $referScript = basename($parseRefer['path']);
  if (!in_array($referScript, array('hcuProfileAlias.prg','hcuProfileDesc.prg','hcuProfileEmail.prg','hcuProfilePwd.prg','hcuProfileSecurity.prg'))) {
    // ** Wrong script calling this data routine
    $aryErrors[] = $MC->msg('Feature Unavailable', HCU_DISPLAY_AS_RAW);
    throw new Exception (HCU_JsonEncode($aryErrors));
  }
*/
  /*
   * ** CHECK USER FEATURE PERMISSIONS **
   * NOTE: DO NOT AUTO-REDIR.  Handle perm error here
   */
  if (!PermCheckFeatureScreen($dbh, $HB_ENV, $MC, FEATURE_BASIC, '', false)) {
    throw new Exception (HCU_JsonEncode(Array($MC->msg('Rights not set', HCU_DISPLAY_AS_HTML))));
  }


  require_once(dirname(__FILE__) . '/../../shared/library/cu_fun.i');

  if (!$dbh) {
    // The connection was not made to the database
    // unresolved: return an error??
  }

  // initialize the error and result objects
  $aryResult = array();
  $aryErrors =  array();
  $aryInfo = array();
  $aryReply = array();

  $live = (dirname($_SERVER['PHP_SELF']) == '/hculive7');
  if ($live) {
    $cutx = "culivetx";
    $showtx = ", show_livetx('{$HB_ENV['cu']}','{$HB_ENV['Cn']}') ";
  } else {
    $cutx = "cubatchtx";
    $showtx = ", show_txacct('{$HB_ENV['cu']}','{$HB_ENV['Cn']}') ";
  }

  // ** First Check to see if the user has a 2 Factor Cookie set
  //$cookieName = Return2FactorName($HB_ENV['cu'], $HB_ENV['2factorkey'], $HB_ENV['Cn']);
  // ** Its existence is proof they have set cookie
  /*if ($_COOKIE[$cookieName] != '') {
    $logger->info("User has a 2 Factor Cookie set");
    $Cookie2FactorSet = true;
  } else {
    $logger->info("User doesn't have a 2 Factor Cookie set");
    $Cookie2FactorSet = false;
  }*/

  // do the requested operation
  $requested_operation = $HB_ENV["HCUPOST"]["action"];
  switch ( $requested_operation ) {
    case "email_save":

      // set up what the verification/update functions expect
      $emailRequired = ($HB_ENV['Fmsg_tx'] & $EMAIL_FLAG);
      $paramEmailAddress = $HB_ENV['HCUPOST']['email'];
      $updFields['settings_email']['email'] = $HB_ENV['HCUPOST']['email'];
      $updFields['settings_email']['egenl'] = $HB_ENV['HCUPOST']['egenl'];
      $updFields['settings_email']['verify'] = $emailRequired;
      $updFields['settings_email']['valid'] = $HB_ENV['HCUPOST']['emailValid'];

      // * are we verifying the email address
      $aryUpdate = Validate_Settings($dbh, $HB_ENV, $updFields, $MC);

      if ($aryUpdate['status']['code'] == '000') {
        $aryUpdate = Update_User_Settings($dbh, $HB_ENV, $MC, $updFields, false);
      }

      if ($aryUpdate['status']['code'] != '000') {
        // an error occurred
        $aryErrors = array();
        for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
          $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      } else {
        $reqFlag = "";
        if ( $emailRequired ) {
          // clear out the email required flag
          $reqFlag = "&Fmsg_tx=" . ($HB_ENV['Fmsg_tx'] ^ $EMAIL_FLAG);
        }
        $_COOKIE['Ticket'] = SetTicket($HB_ENV, $_COOKIE['Ticket'],"Ml=$paramEmailAddress" . $reqFlag);

        // return the values
        $aryResult["email"] = $HB_ENV['HCUPOST']['email'];
        $aryResult["egenl"] = $HB_ENV['HCUPOST']['egenl'];

        // return status
        $aryInfo = array( "message" => $MC->msg('EMail Settings Changed', HCU_DISPLAY_AS_RAW) );

        // now try to update the alerts - any in the list get updated
        if ( strlen( $HB_ENV["HCUPOST"]["alertEmails"] ) > 0 ) {

          // get the alerts
          $alertInfo = Get_AlertsDetailed( $dbh, $HB_ENV["Cu"], $HB_ENV["Uid"], $HB_ENV["Fset3"]);
          $alertList = $alertInfo["data"];

          $emailList = explode( "|", $HB_ENV["HCUPOST"]["alertEmails"] );

          // go through the alerts
          for ( $a = 0; $a < count( $alertList ); $a++ ) {
            if ( $alertList[$a]["emailtype"] == "E" &&
                 in_array( $alertList[$a]["notifyto"], $emailList ) ) {

              $sql = "UPDATE cu_alerts
                SET notifyto='{$HB_ENV['HCUPOST']['email']}'
                WHERE user_id={$HB_ENV["Uid"]}
                AND id={$alertList[$a]["id"]}";

              db_query($sql, $dbh);
            }
          }

        }
      }

      break;
    case "read_alert_emails":

      $emailAlertList = array();
      $alertInfo = Get_AlertsDetailed( $dbh, $HB_ENV["Cu"], $HB_ENV["Uid"], $HB_ENV["Fset3"]);
      $alertList = $alertInfo["data"];
      $defaultEmail = $HB_ENV['Ml'];

      for( $i = 0; $i < count($alertList); $i ++) {
        if( $alertList[$i]['emailtype'] == 'E' ) {
          $found = false;

          for ($j = 0; $j < count( $emailAlertList ); $j++ ) {
            if($emailAlertList[$j]['email'] == $alertList[$i]['notifyto']) {
              $found = true;

              if( $emailAlertList[$j]["type"] != $alertList[$i]["type_name"] ) {
                $emailAlertList[$j]["type"] = "Multiple";
              }
            }
          }

          if (!$found) {
            $emailAlertList[] = array(
              "id" => $i,
              "type" => $alertList[$i]["type_name"],
              "email" => $alertList[$i]["notifyto"],
              "choice" => $alertList[$i]["notifyto"] == $defaultEmail ? "Y" : "N" );
          }
        }
      }

      $aryResult = $emailAlertList;

      break;
    case "pwd_save":
      // validate the inputs

      // set up what the verification/update functions expect
      $updFields['settings_password']['current'] = $HB_ENV['HCUPOST']['old'];
      $updFields['settings_password']['newpasswd'] = $HB_ENV['HCUPOST']['new1'];
      $updFields['settings_password']['confpasswd'] = $HB_ENV['HCUPOST']['new2'];

      // check if the guidelines were checked
      if ( $HB_ENV['HCUPOST']['sawhints'] != "Y" ) {
        $aryErrors[] = array( "message" => $MC->msg('Please review the password guidelines', HCU_DISPLAY_AS_RAW) );

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      $aryResult = Validate_PwdRules( $dbh, $HB_ENV, $updFields, $MC );

      // check if the requirements were met
      if ( $aryResult["status"]["code"] != '000' ) {
        for ( $e = 0; $e < count( $aryResult["status"]["errors"] ); $e++ ) {
          $aryErrors[] = array( "message" => $aryResult["status"]["errors"][$e] );
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // * are we verifying the email address
      $aryUpdate = Validate_Settings($dbh, $HB_ENV, $updFields, $MC);

      if ($aryUpdate['status']['code'] == '000') {
        $aryUpdate = Update_User_Settings($dbh, $HB_ENV, $MC, $updFields, false);

        if ($aryUpdate['status']['code'] != '000') {
          // an error occurred, convert the error into an id:message pair, if we know the id (field name)
          for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
            $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        } else {
          // return success
          $aryResult["success"] = 0;

          // ** If the Ffchg flag is set to Y -- Then reset to N
          SetTicket($HB_ENV, $_COOKIE['Ticket'],"Ffchg=N");

          // return status
          $aryInfo = array( "message" => $MC->msg('Update Completed', HCU_DISPLAY_AS_RAW) );
        }
      } else {
        // convert the error into an id:message pair, if we know the id (field name)
        for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
          $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      break;
    case "challenge_save":
      // validate the inputs

      if ($HB_ENV['HCUPOST']['security_token'] != '') {
        // * we are being passed the security token -- NOW
        // ** GET THE CURRENT PASSWORD
        $mbrPwd = GetUserInfo($dbh, $HB_ENV, $MC, Array("user_id" => $HB_ENV['Uid'], "cu" => $HB_ENV['Cu']));

        if ($mbrPwd['status']['code'] != '000') {
          // ** An error occurred retrieving the saved password hash value
          for ( $e = 0; $e < count( $mbrPwd["status"]["errors"] ); $e++ ) {
            $aryErrors[] = array( "message" => $mbrPwd["status"]["errors"][$e] );
          }
        } else {
          // ** Create the security token again to test validit
          // ** Get the database pwd hashed value
          $mbrPwdHash = $mbrPwd['data']['cuusers_passwd'];

          $randomNbr = Return_Random4Challenge($HB_ENV);

          $aryMbrChg = Get_MemberChallengeResponses($dbh, $HB_ENV, $HB_ENV['Cn']);

          // sort the choices in order for consistency
          $choices = array();
          foreach ($aryMbrChg as $questId => $questResp) {
            $choices[] = $questId;
          }
          sort( $choices );
          $choiceString = implode( $choices );

          // * Create the security token - - HASHED PWD + RANDOM NBR + current challenge choices + SECRET
          $securityToken = sha1($mbrPwdHash . $randomNbr . $choiceString . $HB_ENV['secret']);

          if ($securityToken == $HB_ENV['HCUPOST']['security_token']) {
            $act = "validated";
          } else {
            $aryErrors[] = array( "message" => $MC->msg('Invalid Authentication', HCU_DISPLAY_AS_RAW) );
          }
        }
      } else {
        $aryErrors[] = array( "message" => $MC->msg('Invalid Authentication', HCU_DISPLAY_AS_RAW) );
      }

      if ( count( $aryErrors ) ) {
        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      // ** If no Errors were found then update database
      // ** Create the field list array

      $updFields['settings_confidence']['confword'] = $HB_ENV['HCUPOST']['security_confidence'];
      if ($HB_ENV['Ffreset'] > 0) {
        // ** Update userflags if MEM_FORCE_RESET is set
        if (HCU_array_key_exists('cuusers_userflags', $mbrPwd['data'])) {
          // * data structure exists for mbrPwd -- reset the field if 'userflags' EXISTS
          // ** Userflags -- Reset the MEM_FORCE_RESET flag?

          $tmpVal = (int) HCU_array_key_value('cuusers_userflags', $mbrPwd['data']);
          // ** NEGATE the MEM_FORCE_RESET value
          $tmpVal = ~(~$tmpVal | GetUserFlagsValue('MEM_FORCE_RESET'));

          $updFields['settings_confidence']['userflags'] = $tmpVal;
        }
      }

      $questIdx = 0;
      $newChoices = array();
      if (intval($HB_ENV['flagset3'] & GetFlagsetValue("CU3_MFA_AUTHCODE")) === 0) {
        while(HCU_array_key_exists("security_qst{$questIdx}", $HB_ENV['HCUPOST'])) {
          $updFields['settings_questions'][] = Array('cqid' => $HB_ENV['HCUPOST']["security_qst{$questIdx}"], 'display' => $HB_ENV['HCUPOST']["security_rsp{$questIdx}"]);

          // save the new choices in case returning an updated token
          $newChoices[] = $HB_ENV['HCUPOST']["security_qst{$questIdx}"];

          $questIdx++;
        }
      }
      // ** get update for phone numbers
      if (HCU_array_key_exists("security_phones", $HB_ENV['HCUPOST'])) {
        $phonesJson = $HB_ENV['HCUPOST']['security_phones'];
        $phonesAry = HCU_JsonDecode($phonesJson);
        $updFields['settings_phones']['mobile'] = $phonesAry['mobile'];
        /* AT THIS TIME DO NOT SAVE HOME/WORK */
      }

      // * are we verifying the email address
      $aryUpdate = Validate_Settings($dbh, $HB_ENV, $updFields, $MC);

      if ($aryUpdate['status']['code'] == '000') {
        // since the security phone number are part of a different table
        // we must update them separately from the Update_User_Settings
        // function.
        // only update if the mfa secure access coed flag is set
        $aryUpdate = Update_User_Security($dbh, $HB_ENV, $MC, $updFields);
        if ($aryUpdate['status']['code'] != '000') {
          // an error occurred, convert the error into an id:message pair, if we know the id (field name)
          for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
            $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // update user table information.
        $aryUpdate = Update_User_Settings($dbh, $HB_ENV, $MC, $updFields, false);
        if ($aryUpdate['status']['code'] != '000') {
          // an error occurred, convert the error into an id:message pair, if we know the id (field name)
          for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
            $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        } else {

          // return success, and the updated security_token
          sort( $newChoices );
          $choiceString = implode( $newChoices );

          // * Create the security token - - HASHED PWD + RANDOM NBR + current challenge choices + SECRET
          $aryResult["security_token"] = sha1($mbrPwdHash . $randomNbr . $choiceString . $HB_ENV['secret']);

          $aryResult["success"] = 0;

          // return status
          $aryInfo = array( "message" => $MC->msg('Update Completed', HCU_DISPLAY_AS_RAW) );
        }
      } else {
        // convert the error into an id:message pair, if we know the id (field name)
        for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
          $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
        }

        throw new Exception (HCU_JsonEncode($aryErrors));
      }

      break;
    case "usr_save":
        $Cu = $HB_ENV["Cu"];
        $Cn = $HB_ENV["Cn"];

        $old = $HB_ENV['HCUPOST']['old'];
        $userAlias = $HB_ENV['HCUPOST']['user_alias'];
        $userAlias2 = $HB_ENV['HCUPOST']['user_alias2'];

        # validate that password entered matches password in db
        $sql = "select passwd from {$Cu}user where  user_name='$Cn'";
        $sth = db_query($sql,$dbh);

        list($savedPasswd) = db_fetch_array($sth,0);
        db_free_result($sth);

        $savedPasswd = preg_replace("/ +$/","",$savedPasswd);
        if (!password_verify($old, $savedPasswd)) {
          $aryErrors[] = array( "message" => $MC->msg('Invalid Authentication', HCU_DISPLAY_AS_RAW) );

          throw new Exception (HCU_JsonEncode($aryErrors));
        }

        // **** VALIDATE INFORMATION
        $upd_fields['settings_password']['current'] = $old;
        $upd_fields['settings_alias']['username'] = $userAlias;
        $upd_fields['settings_alias']['username_confirm'] = $userAlias2;
        $aryUpdate = Validate_Settings($dbh, $HB_ENV, $upd_fields, $MC);

        // UNSET SO WE DON'T CHANGE PASSWORD
        unset($upd_fields['settings_password']);

        if ($aryUpdate['status']['code'] == '000') {

          $aryUpdate = Update_User_Settings($dbh, $HB_ENV, $MC, $upd_fields, false);
        }

        if ($aryUpdate['status']['code'] != '000') {
          // an error occurred
          $aryErrors = array();
          for ( $e = 0; $e < count( $aryUpdate["status"]["errors"] ); $e++ ) {
            $aryErrors[] = array( "message" => $aryUpdate["status"]["errors"][$e] );
          }

          throw new Exception (HCU_JsonEncode($aryErrors));
        } else {

          // UPDATE COOKIE TO AVOID THROWING USER TO PROFILEREQUIRE.PRG
          $_COOKIE['Ticket'] = SetTicket($HB_ENV, $_COOKIE['Ticket'],"Cn=$userAlias");
          $HB_ENV['Cn'] = $userAlias; // update HB_ENV with new name
        }

        // if we made it here then the update was successful
        $aryInfo = array( "message" => $MC->msg('Member Settings Changed', HCU_DISPLAY_AS_RAW) );
      break;
    case "acct_desc_read":
      $HB_ENV["doEncrypt"]= true;

      // GET ACCOUNT BALANCES FOR TYPES AND DESCRIPTIONS
      $arry_balances = Get_Balances($dbh, $HB_ENV, $callerContext="acct_desc_read");
      // ERRORS
      if ($arry_balances['status']['code'] != '000') {
        // an error occurred
        $arry_errors = array();
        for ( $e = 0; $e < count( $arry_balances["status"]["errors"] ); $e++ ) {
          $arry_errors[] = array( "message" => $arry_balances["status"]["errors"][$e] );
        }

        throw new Exception (HCU_JsonEncode($arry_errors));
      }

      // CONSTRUCT RETURN DATA
      $aryResult = array("dp" => array(), "ln" => array(), "cc" => array());
      foreach ($arry_balances as $type => $data) {
        // first part of data is always status code
        // skip it.
        if ($type === "status") { continue; }

        foreach ($data as $value) {
          // ADD NEEDED ITEMS TO RETURN ARRAY
          $aryResult[$type][] = array("displayorder" => $value["displayorder"], "displayname" => $value["displayname"], "encryption" => $value["encryption"],
            "placeholder" => $value['description'], "title" => $value["description"]);
        }
      }

      break;

    case "acct_desc_update":
      // ACCOUNT NUMBER AND CU NEEDED FOR DATA ACCESS
      $Cu = $HB_ENV['Cu'];
      $Ci = $HB_ENV['Uid'];

      // GET UPDATE DATA
      $update = $HB_ENV['HCUPOST']['account_data'];

      $accountDesc = array();
      foreach ($update as $account) {
        // CAPTURE ALL ACCOUNT USER DEFINED NAMES
        if ( HCU_array_key_exists("displayname", $account) && $account["displayname"] != "") {
          $accountDesc[] = strtolower($account["displayname"]);
        }
      }

      // UPDATE DATABASE
      $sqls = "";
      foreach ($update as $account) {

        if (!HCU_array_key_exists("displayname", $account) || !HCU_array_key_exists("displayorder", $account) || !HCU_array_key_exists("encryption", $account))
          throw new exception(array($MC->msg("Error Occurred updating settings", HCU_DISPLAY_AS_RAW)), 101);

        // Get variables to update
        $name = prep_save(trim($account["displayname"]), 255);
        $order = intval($account["displayorder"]);

        // Get key
        $encryption= HCU_PayloadDecode($Cu, $account["encryption"]);

        $recordType = $encryption[0];
        /*
         * If accountType has a '#' then this is a CrossAccount
         * recordtype values are {T, P}
         */
        if (strpos($encryption[2], '#')) {
          // * we know it's a cross account  -- set accordingly using the current value of recordType
          $recordType = ($recordType == "D" ? "T" : "P");
        } else {
          $recordType = prep_save($recordType == "C" ? "L" : $recordType, 1);
        }
        $accountNumber = prep_save($encryption[1], 12);
        $accountType = prep_save($encryption[2], 25);
        $certNumber = $recordType == "D" ? intval($encryption[3]) : 0;

        // SET SQL QUERY
        $sql = "
          UPDATE {$Cu}useraccounts
          SET
            display_name= '$name',
            display_order= '$order'
          WHERE user_id= '$Ci'
            AND accountnumber= '$accountNumber'
            AND accounttype= '$accountType'
            AND recordtype= '$recordType'
            AND certnumber= $certNumber;";

        $sqls .= $sql;
      }
      // SEND QUERY
      $sth = db_query($sqls, $dbh);
      if (!$sth) {
        $aryErrors[] = $MC->msg("Error Occurred updating settings", HCU_DISPLAY_AS_RAW);
      } else {
        db_free_result($sth);
        $aryInfo[] = $MC->msg("Member Settings Changed", HCU_DISPLAY_AS_RAW);
      }

      if ( count($aryErrors) ){
        throw new Exception (HCU_JsonEncode($aryErrors));
      }
      break;

    default:
      $aryErrors[] = array( "message" => "Unexpected action: {$HB_ENV["HCUPOST"]["action"]}" );
      throw new Exception (HCU_JsonEncode($aryErrors));
      break;
  }
}
catch(Exception $ex)
{
  //Return error message
  $aryReply["homecuErrors"] = HCU_JsonDecode( $ex->getMessage() );

  // if an error, don't return data
  $aryResult = array();

  // if an error, don't return info
  $aryInfo = array();

  // don't update cookie if came through here - clear existence flag to cause non-update
  //$Cookie2FactorSet = false;
}

  $usrInfo = GetUserbyName($HB_ENV['dbh'], $HB_ENV['Cu'], $HB_ENV['Cn']);
  $usrDeviceCookieSame = isValidDeviceCookie($HB_ENV['Cu'], $usrInfo);

  // Update the device cookie. For apps, always return the update. For Web-based
  // continue the same way.
  if ( $HB_ENV["platform"] == "ADA" || $HB_ENV["platform"] == "APP") {
    // Apps will add the updated username or password on the client side.

    // Get the MFA mode (authcode or not) flag
    $mfaMode = (intval($HB_ENV['Fset3'] & GetFlagsetValue('CU3_MFA_AUTHCODE')));

    // Get the mfadate from the UserRec
    $mfaDate = HCU_array_key_value("mfadate", $usrInfo);

    $cookieParams = array ( "cu" => $HB_ENV["cu"],
                            "user_name" => $usrInfo["user_name"],
                            "saved_pass" => $usrInfo["passwd"],
                            "saved_email" => $usrInfo['email'],
                            "saved_confidence" => $usrInfo['confidence'],
                            "mfa_mode" => $mfaMode,
                            "mfa_date" => $mfaDate,
                            "persists_time" => $HB_ENV['SYSENV']['ticket']['persists']
                          );

    $cookieInfo = CreateDeviceCookie( $cookieParams);

    // add the app device cookie to the return information for apps
    if ( strlen( $cookieInfo["name"] ) > 0 ) {
      $returnCookieInfo = $cookieInfo["name"] . "|" . $cookieInfo["content"] . "|" . $cookieInfo["expire"];
      $aryResult["homecuKey"] = $returnCookieInfo;
    }
  } else {
    if ($usrDeviceCookieExists && !$usrDeviceCookieSame) {
      // ** refetch the member information
      $mbrInfo = GetUserInfo($dbh, $HB_ENV, $MC, Array("user_id" => $HB_ENV['Uid'], "cu" => $HB_ENV['Cu']));
      // ** if we were able to retrieve the member data
      if ($mbrInfo['status']['code'] == '000') {
        // * Set fields for setting the cookie
        $HB_ENV['cu'] = $HB_ENV['Cu'];
        $HB_ENV['username'] = $HB_ENV['Cn'];
        $HB_ENV['savepass'] = trim($mbrInfo['data']['cuusers_passwd']);
        $HB_ENV['savemail'] = trim($mbrInfo['data']['cuusers_email']);
        $HB_ENV['confidence'] = trim($mbrInfo['data']['cuusers_confidence']);

        // ** Pass in an equivalent to the userrec
        SetDeviceCookie($HB_ENV, $mbrInfo['data']);
      }
    }
  }

  if ( count( $aryResult ) ) $aryReply["homecuData"] = $aryResult;

  if ( count( $aryInfo ) ) $aryReply["homecuInfo"] = $aryInfo;

  print HCU_JsonEncode($aryReply);