SSO Update :)

create_ticket_api.php

@@ -5,7 +5,6 @@ error_reporting(E_ALL);
 ini_set('display_errors', 1);
 file_put_contents('debug.log', print_r($_POST, true) . "\n" . file_get_contents('php://input') . "\n", FILE_APPEND);
 
-
 // Load environment variables with error check
 $envFile = __DIR__ . '/.env';
 if (!file_exists($envFile)) {
@@ -41,6 +40,22 @@ if ($conn->connect_error) {
     exit;
 }
 
+// Authenticate via API key
+require_once __DIR__ . '/middleware/ApiKeyAuth.php';
+require_once __DIR__ . '/models/AuditLogModel.php';
+
+$apiKeyAuth = new ApiKeyAuth($conn);
+
+try {
+    $systemUser = $apiKeyAuth->authenticate();
+} catch (Exception $e) {
+    // Authentication failed - ApiKeyAuth already sent the response
+    exit;
+}
+
+$userId = $systemUser['user_id'];
+file_put_contents('debug.log', "Authenticated as system user ID: $userId\n", FILE_APPEND);
+
 // Create tickets table with hash column if not exists
 $createTableSQL = "CREATE TABLE IF NOT EXISTS tickets (
     id INT AUTO_INCREMENT PRIMARY KEY,
@@ -122,9 +137,9 @@ if (!$data) {
 // Generate ticket ID (9-digit format with leading zeros)
 $ticket_id = sprintf('%09d', mt_rand(1, 999999999));
 
-// Prepare insert query
-$sql = "INSERT INTO tickets (ticket_id, title, description, status, priority, category, type, hash) 
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?)";
+// Prepare insert query with created_by field
+$sql = "INSERT INTO tickets (ticket_id, title, description, status, priority, category, type, hash, created_by)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)";
 
 $stmt = $conn->prepare($sql);
 // First, store all values in variables
@@ -137,7 +152,7 @@ $type = $data['type'] ?? 'Issue';
 
 // Then use the variables in bind_param
 $stmt->bind_param(
-    "ssssssss",
+    "ssssssssi",
     $ticket_id,
     $title,
     $description,
@@ -145,10 +160,20 @@ $stmt->bind_param(
     $priority,
     $category,
     $type,
-    $ticketHash
+    $ticketHash,
+    $userId
 );
 
 if ($stmt->execute()) {
+    // Log ticket creation to audit log
+    $auditLog = new AuditLogModel($conn);
+    $auditLog->logTicketCreate($userId, $ticket_id, [
+        'title' => $title,
+        'priority' => $priority,
+        'category' => $category,
+        'type' => $type
+    ]);
+
     echo json_encode([
         'success' => true,
         'ticket_id' => $ticket_id,