<?php
// Load environment variables from .env file
$autoloadPath = realpath(__DIR__ . '/../vendor/autoload.php');
if ($autoloadPath) {
    require_once $autoloadPath;
} else {
    http_response_code(500);
    echo json_encode(['status' => 'failure', 'message' => 'Vendor autoload missing in location server. Please run composer install.']);
    exit;
}
require_once __DIR__ . '/load_env.php';

$env_file = file_exists(__DIR__ . '/../loction-keys/.env') 
    ? __DIR__ . '/../loction-keys/.env' 
    : (file_exists('/home/location/env/.env') ? '/home/location/env/.env' : '');
if (!empty($env_file)) {
    loadEnvironment($env_file);
}

// Get environment variables (You don't need user/pass for JWT auth itself)
$secretKeyFile = file_exists(__DIR__ . '/../loction-keys/.secret_key') 
    ? __DIR__ . '/../loction-keys/.secret_key' 
    : '/home/location/.secret_key';
$secretKey = trim((string) @file_get_contents($secretKeyFile));
 // Only need the secret key now
// Debug loaded environment variables

// --- CORS Headers ---
header("Access-Control-Allow-Origin: https://intaleqapp.com");  // Replace * with your Flutter app's origin
header("Access-Control-Allow-Methods: GET, POST, OPTIONS"); // Adjust as needed
header("Access-Control-Allow-Headers: Content-Type, Authorization");
header('Content-Type: application/json'); // Set content type to JSON

//SET time_zone = 'Asia/Damascus';
date_default_timezone_set('Asia/Damascus');

// Handle preflight requests (OPTIONS)
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
    http_response_code(200);
    exit;
}
// $TRIPZ_SMTP_PASSWORD=getenv('TRIPZ_SMTP_PASSWORD');
// --- Database Connection (Still needed for your application logic) ---
try {
    $dbname = getenv('DB_TRACKING_NAME') ?: (getenv('dbname') ?: 'locationDB');
    $dbHost = getenv('DB_TRACKING_HOST') ?: (getenv('DB_HOST') ?: 'mysql');
    $dsn = "mysql:host=$dbHost;dbname=$dbname;charset=utf8mb4";
    $options = [
        PDO::ATTR_EMULATE_PREPARES => false,
        PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
        PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
        PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES UTF8"
    ];
    $user = getenv('DB_TRACKING_USER') ?: (getenv('USER') ?: 'root');
    $pass = getenv('DB_TRACKING_PASS') ?: (getenv('PASS') ?: getenv('MYSQL_ROOT_PASSWORD'));
    $con = new PDO($dsn, $user, $pass, $options);
//$con->exec("SET time_zone = '+03:00'");
    // --- JWT Authentication ---
 //  include "encrypt_decrypt.php"; 
  include __DIR__ . "/functions.php"; // Include the functions file
   

     $decodedToken = authenticateJWT(); // Call the authentication function


} catch (PDOException $e) {
    error_log($e->getMessage());
    http_response_code(500); // Internal Server Error
    echo json_encode(['error' => 'A database error occurred.']);
    exit;
}
?>