api/routes/userRoute.php

<?php

namespace routes;

use classes\authentication;
use classes\response;
use objects\logs_o;
use objects\users_o;
use traits\route_t;

class userRoute
{
    use route_t;

    public function run(): void
    {
        $this->get('/superuser/user', function () {
            // Require the user to be logged in
            global $response;
            $this->requirePermission('get_user');
            // Get the user object
            $user = (new authentication())->get_user();
            // Check if the request was successful
            if ($user) {
                // Log the incident
                (new logs_o())->add('users', 'global', 1, $user->id, 'GET_USER', 'Successfully fetched user');
                $targetUser = (new users_o())->automaticGetTargetUserFromRequest();
                // Check if the user was found
                if (!$targetUser->exists()) {
                    // Log the incident
                    (new logs_o())->add('users', 'global', 1, $user->id, 'GET_USER', 'No user found');
                    // Return an error
                    $response->error('User not found', 404);
                }
                // Return the list of users
                $response->success(
                    $targetUser->includeIncludes(['all'])->asArray()
                );
            } else {
                // Log the incident
                (new logs_o())->add('users', 'global', 1, 0, 'GET_USER', 'No user found, or invalid session');
                // Return an error
                $response->error('Invalid session', 400);
            }
        });

        $this->get('/superuser/user/discounts', function () {
            // Require the user to be logged in
            global $response;
            $this->requirePermission('get_custom_prices_other');
            // Get the user object
            $user = (new authentication())->get_user();
            // Check if the request was successful
            if ($user) {
                // Log the incident
                (new logs_o())->add('users', 'global', 1, $user->id, 'GET_CUSTOM_PRICE', 'Successfully fetched custom price');
                $targetUser = (new users_o())->automaticGetTargetUserFromRequest();
                // Check if the user was found
                if (!$targetUser->exists()) {
                    // Log the incident
                    (new logs_o())->add('users', 'global', 1, $user->id, 'GET_CUSTOM_PRICE', 'No user found');
                    // Return an error
                    $response->error('User not found', 404);
                }
                // Return the list of users
                $response->success(
                    $targetUser->getCustomPrices()
                );
            } else {
                // Log the incident
                (new logs_o())->add('users', 'global', 1, 0, 'GET_CUSTOM_PRICE', 'No user found, or invalid session');
                // Return an error
                $response->error('Invalid session', 400);
            }
        });

        $this->post('/superuser/user/discounts', function () {
            // Require the user to be logged in
            global /** @var response $response */
            $response;
            $this->requirePermission('set_custom_price');
            // Get the user object
            $user = (new authentication())->get_user();
            // Check if the request was successful
            if ($user) {
                // Set the custom price
                $targetUser = (new users_o())->automaticGetTargetUserFromRequest();
                if (!$targetUser->exists()) {
                    // Log the incident
                    (new logs_o())->add('users', 'global', 1, $user->id, 'SET_CUSTOM_PRICE', 'No user found');
                    // Return an error
                    $response->add_meta('user_id', (int)$this->fromRequest('user_id'));
                    $response->error('User not found (target)', 404);
                }
                // Check if the required fields are set
                $data = json_decode(file_get_contents('php://input'), true);
                if (!isset($data['discount'])) {
                    // Log the incident
                    (new logs_o())->add('users', 'global', 1, $user->id, 'SET_CUSTOM_PRICE', 'No discount set');
                    // Return an error
                    $response->error('No discount set', 400);
                }
                if (!isset($data['object_id'])) {
                    // Log the incident
                    (new logs_o())->add('users', 'global', 1, $user->id, 'SET_CUSTOM_PRICE', 'No object_id set');
                    // Return an error
                    $response->error('No object_id set', 400);
                }
                if (!isset($data['is_category'])) {
                    // Log the incident
                    (new logs_o())->add('users', 'global', 1, $user->id, 'SET_CUSTOM_PRICE', 'No is_category set');
                    // Return an error
                    $response->error('No is_category set', 400);
                }
                $discount = (int)$data['discount'];
                $object_id = (int)$data['object_id'];
                $is_category = (bool)$data['is_category'];
                // Set the custom price
                $targetUser->setCustomPrice($targetUser->id, $object_id, $discount, $is_category);
                // Log the incident
                (new logs_o())->add('users', 'global', 1, $user->id, 'SET_CUSTOM_PRICE', 'Successfully set custom price');
                // Return a success message
                $response->success('Successfully set custom price');
            } else {
                // Log the incident
                (new logs_o())->add('users', 'global', 1, 0, 'SET_CUSTOM_PRICE', 'No user found, or invalid session');
                // Return an error
                $response->error('Invalid session', 400);
            }
        });
    }
}