82 lines
2.5 KiB
PHP
82 lines
2.5 KiB
PHP
<?php
|
|
/**
|
|
* Dashboard Stats Endpoint (Role-Based & Tenant-Aware)
|
|
*/
|
|
|
|
use App\Core\Database;
|
|
use App\Middleware\AuthMiddleware;
|
|
|
|
// 1. Auth Check
|
|
$decoded = AuthMiddleware::check();
|
|
$db = Database::getInstance();
|
|
|
|
$tenantId = $decoded['tenant_id'] ?? null;
|
|
$companyId = $decoded['company_id'] ?? null;
|
|
$role = $decoded['role'];
|
|
|
|
try {
|
|
$stats = [
|
|
'role' => $role,
|
|
'invoices' => [
|
|
'total' => 0,
|
|
'pending' => 0,
|
|
'approved' => 0
|
|
]
|
|
];
|
|
|
|
// 2. Fetch Invoice Stats
|
|
if ($role === 'super_admin') {
|
|
$where = "WHERE 1=1";
|
|
$params = [];
|
|
} elseif ($role === 'accountant' || $role === 'viewer') {
|
|
$where = "WHERE tenant_id = ? AND company_id = ?";
|
|
$params = [$tenantId, $companyId];
|
|
} else {
|
|
// admin
|
|
$where = "WHERE tenant_id = ?";
|
|
$params = [$tenantId];
|
|
}
|
|
|
|
$stmt = $db->prepare("SELECT COUNT(*) FROM invoices $where");
|
|
$stmt->execute($params);
|
|
$stats['invoices']['total'] = (int)$stmt->fetchColumn();
|
|
|
|
$stmt = $db->prepare("SELECT COUNT(*) FROM invoices $where AND status = 'extracted'");
|
|
$stmt->execute($params);
|
|
$stats['invoices']['pending'] = (int)$stmt->fetchColumn();
|
|
|
|
$stmt = $db->prepare("SELECT COUNT(*) FROM invoices $where AND status = 'approved'");
|
|
$stmt->execute($params);
|
|
$stats['invoices']['approved'] = (int)$stmt->fetchColumn();
|
|
|
|
// 3. Role-Specific Extra Stats
|
|
if ($role === 'super_admin') {
|
|
$stats['tenants'] = (int)$db->query("SELECT COUNT(*) FROM tenants")->fetchColumn();
|
|
$stats['total_users'] = (int)$db->query("SELECT COUNT(*) FROM users")->fetchColumn();
|
|
} elseif ($role === 'admin') {
|
|
$stmt = $db->prepare("SELECT COUNT(*) FROM companies WHERE tenant_id = ?");
|
|
$stmt->execute([$tenantId]);
|
|
$stats['companies'] = (int)$stmt->fetchColumn();
|
|
|
|
$stmt = $db->prepare("SELECT COUNT(*) FROM users WHERE tenant_id = ?");
|
|
$stmt->execute([$tenantId]);
|
|
$stats['users'] = (int)$stmt->fetchColumn();
|
|
|
|
// Get Subscription Quota
|
|
$stmt = $db->prepare("SELECT max_invoices_per_month, invoices_used_this_month FROM subscriptions WHERE tenant_id = ?");
|
|
$stmt->execute([$tenantId]);
|
|
$sub = $stmt->fetch();
|
|
if ($sub) {
|
|
$stats['subscription'] = [
|
|
'limit' => (int)$sub['max_invoices_per_month'],
|
|
'used' => (int)$sub['invoices_used_this_month']
|
|
];
|
|
}
|
|
}
|
|
|
|
} catch (\Exception $e) {
|
|
// Return default zeroed stats on error
|
|
}
|
|
|
|
json_success($stats);
|