// application/controllers/Api.php
defined('BASEPATH') OR exit('No direct script access allowed');

class Api extends CI_Controller {
    
    public function __construct() {
        parent::__construct();
        // 加载必要的模型或库
    }
    
    // 处理 GET 请求的示例
    public function get_data() {
        // 确保是 AJAX 请求
        if (!$this->input->is_ajax_request()) {
            exit('No direct script access allowed');
        }
        
        // 获取请求参数
        $param1 = $this->input->get('param1');
        
        // 处理业务逻辑
        $data = [
            'status' => 'success',
            'message' => 'Data retrieved successfully',
            'data' => [
                'id' => 1,
                'name' => 'Sample Data',
                'param_received' => $param1
            ]
        ];
        
        // 设置响应头并返回 JSON
        $this->output
            ->set_content_type('application/json')
            ->set_output(json_encode($data));
    }
    
    // 处理 POST 请求的示例
    public function post_data() {
        if (!$this->input->is_ajax_request()) {
            exit('No direct script access allowed');
        }
        
        // 获取 POST 数据
        $post_data = $this->input->post();
        
        // 处理业务逻辑
        $response = [
            'status' => 'success',
            'message' => 'Data saved successfully',
            'received_data' => $post_data
        ];
        
        $this->output
            ->set_content_type('application/json')
            ->set_output(json_encode($response));
    }
}

// GET 请求示例
$.ajax({
    url: '/api/get_data',
    type: 'GET',
    data: {
        param1: 'value1'
    },
    dataType: 'json',
    success: function(response) {
        console.log('GET Response:', response);
        // 处理响应数据
    },
    error: function(xhr, status, error) {
        console.error('Error:', error);
    }
});

// POST 请求示例
$.ajax({
    url: '/api/post_data',
    type: 'POST',
    data: {
        name: 'John Doe',
        email: 'john@example.com'
    },
    dataType: 'json',
    success: function(response) {
        console.log('POST Response:', response);
        // 处理响应数据
    },
    error: function(xhr, status, error) {
        console.error('Error:', error);
    }
});

// GET 请求示例
fetch('/api/get_data?param1=value1')
    .then(response => response.json())
    .then(data => {
        console.log('GET Response:', data);
        // 处理响应数据
    })
    .catch(error => console.error('Error:', error));

// POST 请求示例
fetch('/api/post_data', {
    method: 'POST',
    headers: {
        'Content-Type': 'application/json',
    },
    body: JSON.stringify({
        name: 'John Doe',
        email: 'john@example.com'
    })
})
.then(response => response.json())
.then(data => {
    console.log('POST Response:', data);
    // 处理响应数据
})
.catch(error => console.error('Error:', error));

header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, Authorization');

$config['allow_headers'] = ['Content-Type', 'Authorization', 'X-Requested-With'];
$config['allow_methods'] = ['GET', 'POST', 'OPTIONS'];

$config['csrf_protection'] = FALSE;

var csrf_token = '<?php echo $this->security->get_csrf_hash(); ?>';

headers: {
    'X-CSRF-TOKEN': csrf_token
}

data: {
    <?php echo $this->security->get_csrf_token_name(); ?>: csrf_token,
    // 其他数据...
}

$this->output
    ->set_content_type('application/json')
    ->set_output(json_encode($data));

// 加载 REST 库
$this->load->library('rest');

// 定义资源
$this->rest->resource([
    'users' => [
        'get' => 'Users/get_users',
        'post' => 'Users/create_user',
        'put' => 'Users/update_user',
        'delete' => 'Users/delete_user'
    ]
]);

// JWT 验证示例
public function secure_endpoint() {
    $token = $this->input->get_request_header('Authorization');
    
    try {
        $decoded = JWT::decode($token, $secret_key, ['HS256']);
        // 处理业务逻辑
    } catch (Exception $e) {
        $this->output
            ->set_status_header(401)
            ->set_content_type('application/json')
            ->set_output(json_encode(['error' => 'Unauthorized']));
    }
}