SSO Update :)

api/add_comment.php

@@ -10,18 +10,29 @@ try {
     // Include required files with proper error handling
     $configPath = dirname(__DIR__) . '/config/config.php';
     $commentModelPath = dirname(__DIR__) . '/models/CommentModel.php';
-    
+    $auditLogModelPath = dirname(__DIR__) . '/models/AuditLogModel.php';
+
     if (!file_exists($configPath)) {
         throw new Exception("Config file not found: $configPath");
     }
-    
+
     if (!file_exists($commentModelPath)) {
         throw new Exception("CommentModel file not found: $commentModelPath");
     }
-    
+
     require_once $configPath;
     require_once $commentModelPath;
-    
+    require_once $auditLogModelPath;
+
+    // Check authentication via session
+    session_start();
+    if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) {
+        throw new Exception("Authentication required");
+    }
+
+    $currentUser = $_SESSION['user'];
+    $userId = $currentUser['user_id'];
+
     // Create database connection
     $conn = new mysqli(
         $GLOBALS['config']['DB_HOST'],
@@ -29,29 +40,35 @@ try {
         $GLOBALS['config']['DB_PASS'],
         $GLOBALS['config']['DB_NAME']
     );
-    
+
     if ($conn->connect_error) {
         throw new Exception("Database connection failed: " . $conn->connect_error);
     }
-    
+
     // Get POST data
     $data = json_decode(file_get_contents('php://input'), true);
-    
+
     if (!$data) {
         throw new Exception("Invalid JSON data received");
     }
-    
+
     $ticketId = $data['ticket_id'];
-    
-    // Initialize CommentModel directly
+
+    // Initialize models
     $commentModel = new CommentModel($conn);
-    
-    // Add comment
-    $result = $commentModel->addComment($ticketId, $data);
-    
+    $auditLog = new AuditLogModel($conn);
+
+    // Add comment with user tracking
+    $result = $commentModel->addComment($ticketId, $data, $userId);
+
+    // Log comment creation to audit log
+    if ($result['success'] && isset($result['comment_id'])) {
+        $auditLog->logCommentCreate($userId, $result['comment_id'], $ticketId);
+    }
+
     // Discard any unexpected output
     ob_end_clean();
-    
+
     // Return JSON response
     header('Content-Type: application/json');
     echo json_encode($result);

api/update_ticket.php

@@ -37,24 +37,39 @@ try {
     // Load models directly with absolute paths
     $ticketModelPath = dirname(__DIR__) . '/models/TicketModel.php';
     $commentModelPath = dirname(__DIR__) . '/models/CommentModel.php';
-    
+    $auditLogModelPath = dirname(__DIR__) . '/models/AuditLogModel.php';
+
     debug_log("Loading models from: $ticketModelPath and $commentModelPath");
     require_once $ticketModelPath;
     require_once $commentModelPath;
+    require_once $auditLogModelPath;
     debug_log("Models loaded successfully");
-    
+
+    // Check authentication via session
+    session_start();
+    if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) {
+        throw new Exception("Authentication required");
+    }
+    $currentUser = $_SESSION['user'];
+    $userId = $currentUser['user_id'];
+    debug_log("User authenticated: " . $currentUser['username']);
+
     // Updated controller class that handles partial updates
     class ApiTicketController {
         private $ticketModel;
         private $commentModel;
+        private $auditLog;
         private $envVars;
-        
-        public function __construct($conn, $envVars = []) {
+        private $userId;
+
+        public function __construct($conn, $envVars = [], $userId = null) {
             $this->ticketModel = new TicketModel($conn);
             $this->commentModel = new CommentModel($conn);
+            $this->auditLog = new AuditLogModel($conn);
             $this->envVars = $envVars;
+            $this->userId = $userId;
         }
-        
+
         public function update($id, $data) {
             debug_log("ApiTicketController->update called with ID: $id and data: " . json_encode($data));
             
@@ -108,16 +123,21 @@ try {
             }
             
             debug_log("Validation passed, calling ticketModel->updateTicket");
-            
-            // Update ticket
-            $result = $this->ticketModel->updateTicket($updateData);
-            
+
+            // Update ticket with user tracking
+            $result = $this->ticketModel->updateTicket($updateData, $this->userId);
+
             debug_log("TicketModel->updateTicket returned: " . ($result ? 'true' : 'false'));
-            
+
             if ($result) {
+                // Log ticket update to audit log
+                if ($this->userId) {
+                    $this->auditLog->logTicketUpdate($this->userId, $id, $data);
+                }
+
                 // Send Discord webhook notification
                 $this->sendDiscordWebhook($id, $currentTicket, $updateData, $data);
-                
+
                 return [
                     'success' => true,
                     'status' => $updateData['status'],
@@ -259,7 +279,7 @@ try {
     
     // Initialize controller
     debug_log("Initializing controller");
-    $controller = new ApiTicketController($conn, $envVars);
+    $controller = new ApiTicketController($conn, $envVars, $userId);
     debug_log("Controller initialized");
     
     // Update ticket