baseline

pages/admin/users/switch-tenant().php

@@ -0,0 +1,83 @@
+<?php
+
+use MintyPHP\Http\Request;
+use MintyPHP\Router;
+use MintyPHP\Session;
+use MintyPHP\Service\UserService;
+use MintyPHP\Support\Guard;
+
+Guard::requireLogin();
+
+if (($_SERVER['REQUEST_METHOD'] ?? 'GET') !== 'POST') {
+    Router::redirect('admin');
+    return;
+}
+
+if (!Session::checkCsrfToken()) {
+    if (Request::wantsJson()) {
+        http_response_code(400);
+        Router::json(['ok' => false, 'error' => 'csrf']);
+        return;
+    }
+    Router::redirect('admin');
+    return;
+}
+
+$userId = (int) ($_SESSION['user']['id'] ?? 0);
+if ($userId <= 0) {
+    http_response_code(401);
+    if (Request::wantsJson()) {
+        Router::json(['ok' => false, 'error' => 'unauthorized']);
+        return;
+    }
+    Router::redirect('login');
+    return;
+}
+
+// Get tenant_id from POST
+$tenantId = (int) ($_POST['tenant_id'] ?? 0);
+
+if ($tenantId <= 0) {
+    http_response_code(400);
+    if (Request::wantsJson()) {
+        Router::json(['ok' => false, 'error' => 'invalid_tenant_id']);
+        return;
+    }
+    Router::redirect('admin');
+    return;
+}
+
+$result = UserService::setCurrentTenant($userId, $tenantId);
+if (!($result['ok'] ?? false)) {
+    $error = $result['error'] ?? 'update_failed';
+    http_response_code(400);
+    if (Request::wantsJson()) {
+        Router::json(['ok' => false, 'error' => $error]);
+        return;
+    }
+    Router::redirect('admin');
+    return;
+}
+
+// Update session with new current tenant
+if (isset($_SESSION['user'])) {
+    $_SESSION['user']['current_tenant_id'] = $tenantId;
+}
+
+// Update session with full tenant data
+$_SESSION['current_tenant'] = $result['tenant'] ?? null;
+
+// Reload available tenants and departments
+$_SESSION['available_tenants'] = UserService::getAvailableTenants($userId);
+$_SESSION['available_departments_by_tenant'] = UserService::getAvailableDepartmentsByTenant($userId);
+
+if (Request::wantsJson()) {
+    Router::json([
+        'ok' => true,
+        'tenant_id' => $tenantId,
+        'tenant' => $result['tenant'] ?? null,
+    ]);
+    return;
+}
+
+Router::redirect('admin');