<?php

require_once __DIR__ . '/../../../config/bootstrap_cross_auth.php';


 $token = getBearerToken();
if (!$token) {
    http_response_code(401);
    echo json_encode(['success' => false, 'message' => 'Akses ditolak. Token tidak ditemukan.']);
    exit;
}

 $token_hash = hash('sha256', $token);
 $stmtToken = $pdo->prepare("SELECT user_id FROM auth_tokens WHERE token_hash = ? AND expires_at > UTC_TIMESTAMP()");
 $stmtToken->execute([$token_hash]);
 $auth_data = $stmtToken->fetch();

if (!$auth_data) {
    http_response_code(401);
    echo json_encode(['success' => false, 'message' => 'Token tidak valid.']);
    exit;
}

try {
    
    $stmtKelas = $pdo->query("SELECT id_kelas, nama_kelas FROM kelas ORDER BY nama_kelas ASC");
    $kelas = $stmtKelas->fetchAll();

    
    $stmtTahun = $pdo->query("SELECT DISTINCT tahun_ajaran FROM nilai_ujian ORDER BY tahun_ajaran DESC");
    $tahun = $stmtTahun->fetchAll(PDO::FETCH_COLUMN);

    if (empty($tahun)) {
        $y = date('Y');
        $tahun = [$y . '/' . ($y + 1)];
    }

    echo json_encode([
        'success' => true,
        'data' => $kelas,
        'tahun_ajaran' => $tahun
    ]);

} catch (Exception $e) {
    http_response_code(500);
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
}