<?php

namespace Delight\Cookie;

use Delight\Http\ResponseHeader;

/**
 * Session management with improved cookie handling
 *
 * You can start a session using the static method `Session::start(...)` which is compatible to PHP's built-in `session_start()` function
 *
 * Note that sessions must always be started before the HTTP headers are sent to the client, i.e. before the actual output starts
 */
final class Session
{
    private function __construct()
    {
    }

    /**
     * Starts or resumes a session in a way compatible to PHP's built-in `session_start()` function
     *
     * @param string|null $sameSiteRestriction indicates that the cookie should not be sent along with cross-site requests (either `null`, `None`, `Lax` or `Strict`)
     */
    public static function start($sameSiteRestriction = Cookie::SAME_SITE_RESTRICTION_LAX)
    {
        // run PHP's built-in equivalent
        \session_start();

        // intercept the cookie header (if any) and rewrite it
        self::rewriteCookieHeader($sameSiteRestriction);
    }

    /**
     * Returns or sets the ID of the current session
     *
     * In order to change the current session ID, pass the new ID as the only argument to this method
     *
     * Please note that there is rarely a need for the version of this method that *updates* the ID
     *
     * For most purposes, you may find the method `regenerate` from this same class more helpful
     *
     * @param string|null $newId (optional) a new session ID to replace the current session ID
     * @return string the (old) session ID or an empty string
     */
    public static function id($newId = null)
    {
        if ($newId === null) {
            return \session_id();
        }
        else {
            return \session_id($newId);
        }
    }

    /**
     * Re-generates the session ID in a way compatible to PHP's built-in `session_regenerate_id()` function
     *
     * @param bool $deleteOldSession whether to delete the old session or not
     * @param string|null $sameSiteRestriction indicates that the cookie should not be sent along with cross-site requests (either `null`, `None`, `Lax` or `Strict`)
     */
    public static function regenerate(
        $deleteOldSession = false,
        $sameSiteRestriction = Cookie::SAME_SITE_RESTRICTION_LAX,
    ) {
        // run PHP's built-in equivalent
        \session_regenerate_id($deleteOldSession);

        // intercept the cookie header (if any) and rewrite it
        self::rewriteCookieHeader($sameSiteRestriction);
    }

    /**
     * Checks whether a value for the specified key exists in the session
     *
     * @param string $key the key to check
     * @return bool whether there is a value for the specified key or not
     */
    public static function has($key)
    {
        return isset($_SESSION[$key]);
    }

    /**
     * Returns the requested value from the session or, if not found, the specified default value
     *
     * @param string $key the key to retrieve the value for
     * @param mixed $defaultValue the default value to return if the requested value cannot be found
     * @return mixed the requested value or the default value
     */
    public static function get($key, $defaultValue = null)
    {
        if (isset($_SESSION[$key])) {
            return $_SESSION[$key];
        }
        else {
            return $defaultValue;
        }
    }

    /**
     * Returns the requested value and removes it from the session
     *
     * This is identical to calling `get` first and then `remove` for the same key
     *
     * @param string $key the key to retrieve and remove the value for
     * @param mixed $defaultValue the default value to return if the requested value cannot be found
     * @return mixed the requested value or the default value
     */
    public static function take($key, $defaultValue = null)
    {
        if (isset($_SESSION[$key])) {
            $value = $_SESSION[$key];

            unset($_SESSION[$key]);

            return $value;
        }
        else {
            return $defaultValue;
        }
    }

    /**
     * Sets the value for the specified key to the given value
     *
     * Any data that already exists for the specified key will be overwritten
     *
     * @param string $key the key to set the value for
     * @param mixed $value the value to set
     */
    public static function set($key, $value)
    {
        $_SESSION[$key] = $value;
    }

    /**
     * Removes the value for the specified key from the session
     *
     * @param string $key the key to remove the value for
     */
    public static function delete($key)
    {
        unset($_SESSION[$key]);
    }

    /**
     * Intercepts and rewrites the session cookie header
     *
     * @param string|null $sameSiteRestriction indicates that the cookie should not be sent along with cross-site requests (either `null`, `None`, `Lax` or `Strict`)
     */
    private static function rewriteCookieHeader($sameSiteRestriction = Cookie::SAME_SITE_RESTRICTION_LAX)
    {
        // get and remove the original cookie header set by PHP
        $originalCookieHeader = ResponseHeader::take('Set-Cookie', \session_name() . '=');

        // if a cookie header has been found
        if (isset($originalCookieHeader)) {
            // parse it into a cookie instance
            $parsedCookie = Cookie::parse($originalCookieHeader);

            // if the cookie has successfully been parsed
            if (isset($parsedCookie)) {
                // apply the supplied same-site restriction
                $parsedCookie->setSameSiteRestriction($sameSiteRestriction);

                if ($parsedCookie->getSameSiteRestriction() === Cookie::SAME_SITE_RESTRICTION_NONE && !$parsedCookie->isSecureOnly()) {
                    \trigger_error('You may have to enable the \'session.cookie_secure\' directive in the configuration in \'php.ini\' or via the \'ini_set\' function', \E_USER_WARNING);
                }

                // save the cookie
                $parsedCookie->save();
            }
        }
    }
}
__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NDExNjg2MDE4MTE5ODU4NCA3ODIwOTkxNzEzNzMyMjg2IDE1MDg4Mjc2MDg4NDMxMTY=