<?php
require_once __DIR__ . '/../../core/Controller.php';
class LoginController extends Controller {
    // Login Handler
    public function index() {
        if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
            header('Location: ' . Config::get('BASE_URL', '/'));
            exit;
        }
        $email = trim($_POST['email'] ?? '');
        $password = $_POST['password'] ?? '';
        // Validation
        if (empty($email) || empty($password)) {
            Flash::set('Email and password are required.');
            header('Location: ' . Config::get('BASE_URL', '/'));
            exit;
        }
        try {
            Security::checkCsrf($_POST['csrf_token'] ?? '');
            $userModel = $this->model('User');
            $user = $userModel->authenticate($email, $password);
            if ($user) {
                session_regenerate_id(true);
                $_SESSION['user_email'] = $email;
                $_SESSION['user_projects'] = $user['projects'] ?? [];
                $_SESSION['is_admin'] = $user['is_admin'] ?? false;
                $_SESSION['user_agent'] = $_SERVER['HTTP_USER_AGENT'] ?? '';
                header('Location: ' . Config::get('BASE_URL', '/'));
            } else {
                Flash::set('Access denied: Invalid credentials.');
                header('Location: ' . Config::get('BASE_URL', '/'));
            }
        } catch (Exception $e) {
            Flash::set('System error: ' . $e->getMessage());
            header('Location: ' . Config::get('BASE_URL', '/'));
        }
        exit;
    }
    // Logout Handler
    public function logout() {
        session_destroy();
        header('Location: ' . Config::get('BASE_URL', '/'));
        exit;
    }
}