<?php

namespace App\Middleware;

use App\Util\JwtUtil;
use Webman\Http\Request;
use Webman\Http\Response;

class AuthMiddleware
{
    public function process(Request $request, callable $next): Response
    {
        // 从请求头获取 token
        $token = $request->header('Authorization');
        $token = str_replace('Bearer ', '', $token);

        // 如果没有 token，返回 401
        if (!$token) {
            return json([
                'code' => 401,
                'message' => '未登录',
                'data' => null,
            ]);
        }

        // 验证 token
        $payload = JwtUtil::decode($token);
        if (!$payload) {
            return json([
                'code' => 401,
                'message' => '登录已过期',
                'data' => null,
            ]);
        }

        // 将用户ID注入到请求中
        $request->userId = (int) ($payload['user_id'] ?? 0);
        $request->companyId = (int) ($payload['company_id'] ?? 0);

        return $next($request);
    }
}