59 lines
2.0 KiB
PHP
59 lines
2.0 KiB
PHP
<?php
|
|
/**
|
|
* List Companies Endpoint (Synchronized Schema)
|
|
*/
|
|
|
|
use App\Core\Database;
|
|
use App\Core\Encryption;
|
|
use App\Middleware\AuthMiddleware;
|
|
|
|
$decoded = AuthMiddleware::check();
|
|
$db = Database::getInstance();
|
|
|
|
try {
|
|
// 1. Super Admin sees ALL companies
|
|
if ($decoded['role'] === 'super_admin') {
|
|
$stmt = $db->prepare("SELECT c.*, t.name as tenant_name
|
|
FROM companies c
|
|
LEFT JOIN tenants t ON c.tenant_id = t.id
|
|
WHERE c.deleted_at IS NULL ORDER BY c.created_at DESC");
|
|
$stmt->execute();
|
|
$companies = $stmt->fetchAll();
|
|
}
|
|
// 2. Tenant Users (Admin, Accountant, Employee) see all companies in their tenant
|
|
else {
|
|
$stmt = $db->prepare("SELECT * FROM companies WHERE tenant_id = ? AND deleted_at IS NULL ORDER BY created_at DESC");
|
|
$stmt->execute([$decoded['tenant_id']]);
|
|
$companies = $stmt->fetchAll();
|
|
}
|
|
|
|
// 3. Decrypt fields
|
|
foreach ($companies as &$company) {
|
|
// Decrypt Name
|
|
$decryptedName = Encryption::decrypt($company['name']);
|
|
$company['name'] = $decryptedName !== false ? $decryptedName : $company['name'];
|
|
|
|
// Decrypt Name EN
|
|
if (!empty($company['name_en'])) {
|
|
$decryptedNameEn = Encryption::decrypt($company['name_en']);
|
|
$company['name_en'] = $decryptedNameEn !== false ? $decryptedNameEn : $company['name_en'];
|
|
}
|
|
|
|
// Redact JoFotara secrets if returned to UI (or just don't return them)
|
|
unset($company['jofotara_client_id_encrypted']);
|
|
unset($company['jofotara_secret_key_encrypted']);
|
|
unset($company['certificate_password_encrypted']);
|
|
|
|
// Decrypt Tenant Name (if exists)
|
|
if (isset($company['tenant_name'])) {
|
|
$decTenantName = Encryption::decrypt($company['tenant_name']);
|
|
$company['tenant_name'] = $decTenantName !== false ? $decTenantName : $company['tenant_name'];
|
|
}
|
|
}
|
|
|
|
json_success($companies);
|
|
|
|
} catch (\Exception $e) {
|
|
json_error('SQL Error in Companies List: ' . $e->getMessage(), 500);
|
|
}
|