<?php
include 'koneksi.php';
header('Content-Type: application/json');

$token = isset($_GET['token']) ? trim($_GET['token']) : '';

if ($token === '') {
    echo json_encode(["valid" => false, "message" => "Token tidak diberikan"]);
    exit;
}

$stmt = $pdo->prepare("
    SELECT ft.id, ft.id_occupant, ft.status, ft.created_at, o.name, o.foto
    FROM foto_tokens ft
    JOIN occupant o ON o.id_occupant = ft.id_occupant
    WHERE ft.token = ?
");
$stmt->execute([$token]);
$row = $stmt->fetch();

if (!$row) {
    echo json_encode(["valid" => false, "message" => "Token tidak valid"]);
    exit;
}

if ($row['status'] === 'used') {
    echo json_encode(["valid" => false, "message" => "Token sudah digunakan (kadaluwarsa)"]);
    exit;
}

echo json_encode([
    "valid"       => true,
    "id_occupant" => $row['id_occupant'],
    "name"        => $row['name'],
    "foto"        => $row['foto']
]);
?>