SSO Update :)

api/update_ticket.php

@@ -37,24 +37,39 @@ try {
     // Load models directly with absolute paths
     $ticketModelPath = dirname(__DIR__) . '/models/TicketModel.php';
     $commentModelPath = dirname(__DIR__) . '/models/CommentModel.php';
-    
+    $auditLogModelPath = dirname(__DIR__) . '/models/AuditLogModel.php';
+
     debug_log("Loading models from: $ticketModelPath and $commentModelPath");
     require_once $ticketModelPath;
     require_once $commentModelPath;
+    require_once $auditLogModelPath;
     debug_log("Models loaded successfully");
-    
+
+    // Check authentication via session
+    session_start();
+    if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) {
+        throw new Exception("Authentication required");
+    }
+    $currentUser = $_SESSION['user'];
+    $userId = $currentUser['user_id'];
+    debug_log("User authenticated: " . $currentUser['username']);
+
     // Updated controller class that handles partial updates
     class ApiTicketController {
         private $ticketModel;
         private $commentModel;
+        private $auditLog;
         private $envVars;
-        
-        public function __construct($conn, $envVars = []) {
+        private $userId;
+
+        public function __construct($conn, $envVars = [], $userId = null) {
             $this->ticketModel = new TicketModel($conn);
             $this->commentModel = new CommentModel($conn);
+            $this->auditLog = new AuditLogModel($conn);
             $this->envVars = $envVars;
+            $this->userId = $userId;
         }
-        
+
         public function update($id, $data) {
             debug_log("ApiTicketController->update called with ID: $id and data: " . json_encode($data));
             
@@ -108,16 +123,21 @@ try {
             }
             
             debug_log("Validation passed, calling ticketModel->updateTicket");
-            
-            // Update ticket
-            $result = $this->ticketModel->updateTicket($updateData);
-            
+
+            // Update ticket with user tracking
+            $result = $this->ticketModel->updateTicket($updateData, $this->userId);
+
             debug_log("TicketModel->updateTicket returned: " . ($result ? 'true' : 'false'));
-            
+
             if ($result) {
+                // Log ticket update to audit log
+                if ($this->userId) {
+                    $this->auditLog->logTicketUpdate($this->userId, $id, $data);
+                }
+
                 // Send Discord webhook notification
                 $this->sendDiscordWebhook($id, $currentTicket, $updateData, $data);
-                
+
                 return [
                     'success' => true,
                     'status' => $updateData['status'],
@@ -259,7 +279,7 @@ try {
     
     // Initialize controller
     debug_log("Initializing controller");
-    $controller = new ApiTicketController($conn, $envVars);
+    $controller = new ApiTicketController($conn, $envVars, $userId);
     debug_log("Controller initialized");
     
     // Update ticket