api/services/nginx/app/classes/api_key_schema_bootstrap.php

<?php

namespace classes;

/**
 * Schema bootstrap for the api_keys table.
 *
 * This codebase does NOT use a migration framework; new tables are
 * added via `*_schema_bootstrap.php` files that run idempotent
 * `CREATE TABLE IF NOT EXISTS` statements on first use. The companion
 * SQL file at `database/migrations/<TIMESTAMP>_create_api_keys_table.php`
 * is the human-readable source of truth / change record.
 */
class api_key_schema_bootstrap
{
    public const TABLE = 'api_keys';

    private static bool $initialized = false;

    public static function ensureTables(): void
    {
        if (self::$initialized) {
            return;
        }

        global $db;
        if (!isset($db) || !is_object($db)) {
            // No DB connection in this process (e.g. unit test) — skip.
            self::$initialized = true;
            return;
        }

        $queries = [
            "CREATE TABLE IF NOT EXISTS api_keys (
                id BIGINT UNSIGNED AUTO_INCREMENT PRIMARY KEY,
                key_id VARCHAR(64) NOT NULL,
                key_hash VARCHAR(255) NOT NULL,
                name VARCHAR(255) NOT NULL,
                role VARCHAR(32) NOT NULL,
                scopes JSON NULL,
                customer_id BIGINT UNSIGNED NULL,
                created_by BIGINT UNSIGNED NULL,
                last_used_at TIMESTAMP NULL,
                expires_at TIMESTAMP NULL,
                revoked_at TIMESTAMP NULL,
                created_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
                updated_at TIMESTAMP NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
                UNIQUE KEY uq_api_keys_key_id (key_id),
                INDEX idx_api_keys_customer (customer_id),
                INDEX idx_api_keys_key_hash (key_hash),
                INDEX idx_api_keys_revoked (revoked_at),
                INDEX idx_api_keys_role (role)
            ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
        ];

        foreach ($queries as $query) {
            try {
                $db->query($query);
            } catch (\Throwable $e) {
                // Swallow on first-failure in unit-test contexts; the
                // migration companion file documents the canonical DDL.
                if (function_exists('error_log')) {
                    @error_log('[api_key_schema_bootstrap] ' . $e->getMessage());
                }
            }
        }

        self::$initialized = true;
    }

    public static function tableExists(): bool
    {
        global $db;
        if (!isset($db) || !is_object($db) || !method_exists($db, 'getDatabase')) {
            return false;
        }

        try {
            $database = $db->escape_string($db->getDatabase());
            $result = $db->query(
                "SELECT COUNT(*) AS count
                 FROM information_schema.tables
                 WHERE table_schema = '{$database}'
                   AND table_name = 'api_keys'"
            );
            $row = $result ? $result->fetch_assoc() : ['count' => 0];
            return (int)($row['count'] ?? 0) > 0;
        } catch (\Throwable) {
            return false;
        }
    }
}