<?php
include_once( __DIR__ . '/../../controller/DatabaseController.php');
include_once( __DIR__ . '/../../controller/DataController.php');
include_once( __DIR__ . '/../../controller/ApiController.php');
include_once(__DIR__ . '/../../modules/Mail.php');

header("Content-Type: application/json");
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Headers: Authorization, Function, Content-Type");
header("Access-Control-Allow-Methods: POST, GET, OPTIONS");

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit();
}

$validTokens = DatabaseShow(
    "API_Credentials",
    "TOKEN"
);

$validTokens = array_column($validTokens, 'TOKEN');

$headers = getallheaders();
$token = $headers['Authorization'] ?? $headers['authorization'] ?? $_SERVER['HTTP_AUTHORIZATION'] ?? '';
$function = $headers['Function'] ?? $headers['function'] ?? '';

if (!in_array($token, $validTokens)) {
    http_response_code(401);
    $error = json_encode([
        "error" => "Unauthorized",
        "debug_received_token" => $token,
        "debug_all_headers" => $headers
    ]);

    DatabaseInsert(
        "API_LOGS",
        "CLIENT_IP, TOKEN, API, FUNKTION, JSON",
        (new getSpecificData())->getClientIP(),
        $token,
        (new getSpecificData())->getRequestURL(),
        $function,
        $error
    );

    errorMail(
        "API Login failed",
        $error,
        true,
    );

    echo json_encode(
        [
            "error" => "Unauthorized",
            "Contact" => "bruno.eckhardt07@gmail.com",
        ]
    );
    exit;
}

$data = null;

if (in_array($token, $validTokens)) {
    DatabaseInsert(
        "API_LOGS",
        "CLIENT_IP, TOKEN, API, FUNKTION",
        (new getSpecificData())->getClientIP(),
        $token,
        (new getSpecificData())->getRequestURL(),
        $function
    );
    
    if ($function === "IPs") {
        $data = DatabaseShow(
            "logs",
            "CLIENT_IP"
        );
    }

    if ($function === "Ueberstunden") {
        $data = DatabaseShow(
            "Ueberstunden",
            "MINUTEN"
        );
    }

    if ($function === "Berichte") {
        $data = DatabaseShowWithFK(
            "Berufsschulberichte",
            $Berufsschulberichte,
        );
    }
    
    echo json_encode(
        [
            "success" => true,
            "data" => $data,
        ]
    );
    exit;
}