<?php
/**
 * TOKEN UTILITIES - Token Generation & Management
 * ===============================================
 * 
 * DESKRIPSI:
 * ==========
 * Utility functions untuk generate dan manage authentication tokens.
 * Compatible dengan PHP 5.6 - 8.3 untuk multi-environment support.
 * 
 * FUNCTIONS:
 * ==========
 * - generateToken() - Generate secure random token
 * - saveToken() - Save token ke database dengan expiry
 * 
 * SECURITY:
 * =========
 * - Menggunakan openssl_random_pseudo_bytes untuk secure random
 * - Token expire dalam 7 hari
 * - Error handling untuk database operations
 * 
 * AUTHOR: Rodhi
 * DATE: 2026-01-19
 * VERSION: 1.0
 */

require_once __DIR__.'/../models/database.php';

if (!headers_sent()) {
    header('Access-Control-Allow-Origin: *');
    header('Access-Control-Allow-Methods: GET, POST, OPTIONS');
    header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Auth-Token');
    header('Access-Control-Allow-Credentials: true');
    header('Content-Type: application/json');
}

function generateToken() {
    return bin2hex(openssl_random_pseudo_bytes(32));
}

function saveToken($userName, $token) {
    try {
        Database::insert('api_tokens', [
            'username' => $userName,
            'token' => $token,
            'expired_at' => date('Y-m-d H:i:s', strtotime('+7 days'))
        ]);
    } catch (Exception $e) {
        error_log("Failed to save token: " . $e->getMessage());
        return false;
    }
    return true;
}

function getUserByToken($token) {
    try {
        $pdo = Database::getConnection();
        $stmt = $pdo->prepare("
            SELECT username FROM api_tokens
            WHERE token = ? AND expired_at > GETDATE()
        ");
        $stmt->execute([$token]);
        $result = $stmt->fetch(PDO::FETCH_ASSOC);
        
        // Debug: Log token validation attempt
        // error_log("Token validation for: " . substr($token, 0, 16) . "... Result: " . ($result ? "Found user: " . $result['username'] : "Not found"));
        
        return $result;
    } catch (Exception $e) {
        error_log("Failed to get user by token: " . $e->getMessage());
        return null;
    }
}