<?php
/**
 * LOGOUT API - User Logout & Token Cleanup
 * ========================================
 * 
 * DESKRIPSI:
 * ==========
 * API untuk logout user dengan cleanup session dan token.
 * Menghapus token dari database dan destroy session.
 * 
 * METHOD: POST
 * ENDPOINT: /auth/logout
 * AUTHENTICATION: Optional (Bearer token untuk cleanup)
 * 
 * RESPONSE SUCCESS (200):
 * =======================
 * {
 *   "status": "logged out"
 * }
 * 
 * BUSINESS LOGIC:
 * ===============
 * 1. Destroy session yang aktif
 * 2. Jika ada Bearer token, hapus dari database
 * 3. Return status logged out
 * 
 * AUTHOR: Rodhi
 * DATE: 2026-01-19
 * VERSION: 1.0
 */

// Set CORS headers for API access
if (!headers_sent()) {
    header('Access-Control-Allow-Origin: *');
    header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
    header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Auth-Token');
    header('Content-Type: application/json');
}

// Handle preflight requests
if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}



require_once __DIR__.'/../models/database.php';

session_start();
session_destroy();

$headers = getallheaders();
if (!empty($headers['Authorization'])) {
    if (preg_match('/Bearer\s(\S+)/', $headers['Authorization'], $m)) {
        try {
            Database::delete('api_tokens', 'token = ?', [$m[1]]);
        } catch (Exception $e) {
            error_log("Failed to delete token: " . $e->getMessage());
        }
    }
}

echo json_encode(['status' => 'logged out']);