<?php

namespace App\Middleware;

use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Server\RequestHandlerInterface as RequestHandler;

class AdminMiddleware
{
    /**
     * Admin authorization middleware
     */
    public function __invoke(Request $request, RequestHandler $handler): Response
    {
        // Get user from request attributes (set by AuthMiddleware)
        $user = $request->getAttribute('user');
        
        if (!$user) {
            $response = new \Slim\Psr7\Response();
            $response->getBody()->write(json_encode([
                'status' => 'error',
                'message' => 'Authentication required'
            ]));
            return $response
                ->withHeader('Content-Type', 'application/json')
                ->withStatus(401);
        }

        // Check if user has admin role
        // TODO: Implement proper role checking
        $userRole = $user->role ?? 'user';
        
        if ($userRole !== 'admin' && $userRole !== 'super_admin') {
            $response = new \Slim\Psr7\Response();
            $response->getBody()->write(json_encode([
                'status' => 'error',
                'message' => 'Admin privileges required'
            ]));
            return $response
                ->withHeader('Content-Type', 'application/json')
                ->withStatus(403);
        }

        return $handler->handle($request);
    }
}