first commit

2026-05-20 14:01:28 +02:00
commit 0beb9cbab0
2550 changed files with 558392 additions and 0 deletions
@@ -0,0 +1,293 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php'; // Torna al livello di public
+
+use Dotenv\Dotenv;
+
+class VisualLimsApiClient
+{
+    private static $instance = null;
+    private $baseUrl;
+    private $username;
+    private $password;
+    private $token = null;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3)); // Torna al livello di public
+        $dotenv->load();
+
+        $this->baseUrl = $_ENV['API_BASE_URL'];
+        $this->username = $_ENV['API_USERNAME'];
+        $this->password = $_ENV['API_PASSWORD'];
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3));
+            $dotenv->load();
+
+            $simulate = ($_ENV['SIMULATE_EXPORT_LIMS'] ?? '') === 'true';
+
+            if ($simulate) {
+                require_once __DIR__ . '/VisualLimsApiClientMock.class.php';
+                self::$instance = new VisualLimsApiClientMock();
+            } else {
+                self::$instance = new VisualLimsApiClient();
+            }
+        }
+        return self::$instance;
+    }
+
+    private function authenticate($retryCount = 0, $maxRetries = 3)
+    {
+        $ch = curl_init("{$this->baseUrl}/api/authentication/authenticate");
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+            'Username' => $this->username,
+            'Password' => $this->password
+        ]));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Content-Type: application/json',
+            'Accept: application/json'
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_auth_debug.log', 'a') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        $log_message = date('Y-m-d H:i:s') . " - Auth attempt {$retryCount}: HTTP {$http_code}, Error: {$curl_error}, Response: " . substr($response, 0, 1000) . "\n";
+        fwrite($log, $log_message);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false || $http_code != 200) {
+            if ($http_code === 400 && strpos($response, 'Cannot persist the object') !== false && $retryCount < $maxRetries) {
+                usleep(500000); // Ritardo di 500ms
+                return $this->authenticate($retryCount + 1, $maxRetries); // Riprova
+            }
+            throw new Exception("Autenticazione fallita: HTTP {$http_code}, Errore cURL: {$curl_error}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $token_data = json_decode($response, true);
+        $this->token = null;
+
+        if (is_array($token_data) && isset($token_data['token'])) {
+            $this->token = $token_data['token'];
+        } elseif (is_string($token_data) && !empty($token_data)) {
+            $this->token = trim($token_data, '"');
+        } elseif (is_string($response) && !empty($response)) {
+            $this->token = trim($response, '"');
+        }
+
+        if (empty($this->token)) {
+            throw new Exception("Token non ricevuto: " . substr($response, 0, 1000));
+        }
+    }
+
+    private function getToken()
+    {
+        if ($this->token === null) {
+            $this->authenticate();
+        }
+        return $this->token;
+    }
+
+    public function get($endpoint)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/json"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_request_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta: {$curl_error}");
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("Errore nel recupero dati: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $data = json_decode($response, true);
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            throw new Exception("Risposta non JSON valida: " . substr($response, 0, 1000));
+        }
+
+        return $data;
+    }
+
+    public function post($endpoint, $payload)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Content-Type: application/json",
+            "Accept: application/json"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta POST: {$curl_error}");
+        }
+
+        if ($http_code < 200 || $http_code >= 300) {
+            throw new Exception("POST fallito: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        return json_decode($response, true);
+    }
+
+    public function patch($endpoint, $payload)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "PATCH");
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Content-Type: application/json",
+            "Accept: application/json"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta PATCH: {$curl_error}");
+        }
+
+        if ($http_code < 200 || $http_code >= 300) {
+            throw new Exception("PATCH fallito: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        return json_decode($response, true);
+    }
+
+    /**
+     * POST a file as multipart/form-data (used for photo/attachment uploads).
+     *
+     * @param string $endpoint    OData endpoint, e.g. "Campione(613388)/UploadCampioneFile"
+     * @param string $filePath    Absolute path to the file on disk
+     * @param string $fileName    Original file name to send
+     * @param array  $extraFields Additional form fields to include
+     * @return array|null         Decoded JSON response
+     */
+    public function postMultipart($endpoint, $filePath, $fileName, array $extraFields = [])
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $cfile = new CURLFile($filePath, mime_content_type($filePath) ?: 'application/octet-stream', $fileName);
+
+        $payload = array_merge($extraFields, [
+            'file' => $cfile,
+        ]);
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/json",
+            // Content-Type is set automatically to multipart/form-data by cURL
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+
+        $response  = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta POST multipart: {$curl_error}");
+        }
+
+        if ($http_code < 200 || $http_code >= 300) {
+            throw new Exception("POST multipart fallito: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        return json_decode($response, true);
+    }
+
+    public function getBaseUrl()
+    {
+        return $this->baseUrl;
+    }
+
+    /**
+     * Recupera contenuto binario - Adattato per https://bvcpsitaly-elims.com/limsapi
+     */
+    public function getRaw($endpoint)
+    {
+        $token = $this->getToken();
+
+        // IMPORTANTE: usa /odata/ e NON /api/odata/
+        $url = "{$this->baseUrl}/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: */*"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore cURL: " . $curl_error);
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("HTTP {$http_code} su endpoint: " . $url);
+        }
+
+        return $response;
+    }
+}
@@ -0,0 +1,123 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php'; // Torna al livello di public
+
+use Dotenv\Dotenv;
+
+class VisualLimsApiClient
+{
+    private static $instance = null;
+    private $baseUrl;
+    private $username;
+    private $password;
+    private $token = null;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3)); // Torna al livello di public
+        $dotenv->load();
+
+        $this->baseUrl = $_ENV['API_BASE_URL'];
+        $this->username = $_ENV['API_USERNAME'];
+        $this->password = $_ENV['API_PASSWORD'];
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            self::$instance = new VisualLimsApiClient();
+        }
+        return self::$instance;
+    }
+
+    private function authenticate()
+    {
+        $ch = curl_init("{$this->baseUrl}/api/authentication/authenticate");
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+            'Username' => $this->username,
+            'Password' => $this->password
+        ]));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Content-Type: application/json',
+            'Accept: application/json'
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_auth_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false || $http_code != 200) {
+            throw new Exception("Autenticazione fallita: HTTP {$http_code}, Errore cURL: {$curl_error}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $token_data = json_decode($response, true);
+        $this->token = null;
+
+        if (is_array($token_data) && isset($token_data['token'])) {
+            $this->token = $token_data['token'];
+        } elseif (is_string($token_data) && !empty($token_data)) {
+            $this->token = trim($token_data, '"');
+        } elseif (is_string($response) && !empty($response)) {
+            $this->token = trim($response, '"');
+        }
+
+        if (empty($this->token)) {
+            throw new Exception("Token non ricevuto: " . substr($response, 0, 1000));
+        }
+    }
+
+    private function getToken()
+    {
+        if ($this->token === null) {
+            $this->authenticate();
+        }
+        return $this->token;
+    }
+
+    public function get($endpoint)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/json"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_request_debug.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta: {$curl_error}");
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("Errore nel recupero dati: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $data = json_decode($response, true);
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            throw new Exception("Risposta non JSON valida: " . substr($response, 0, 1000));
+        }
+
+        return $data;
+    }
+}
@@ -0,0 +1,135 @@
+<?php
+
+/**
+ * Mock implementation of VisualLimsApiClient.
+ * Activated when SIMULATE_EXPORT_LIMS=true in .env.
+ * All HTTP calls are skipped; fake but structurally valid data is returned.
+ * Every simulated call is logged via error_log() with a [SIMULATE] prefix.
+ */
+class VisualLimsApiClientMock
+{
+    private int $fakeCommessaId;
+
+    public function __construct()
+    {
+        // Stable fake ID for the lifetime of a single request
+        $this->fakeCommessaId = mt_rand(90001, 99999);
+        error_log("[SIMULATE] VisualLimsApiClientMock initialised (fakeCommessaId={$this->fakeCommessaId})");
+    }
+
+    public function get(string $endpoint): array
+    {
+        error_log("[SIMULATE] GET {$endpoint}");
+
+        // --- Fixed-field dropdown lists ---
+
+        if (str_starts_with($endpoint, 'MoltiplicatorePrezzi')) {
+            return ['value' => [
+                ['IdMoltiplicatorePrezzo' => 1, 'Codice' => 'MP-01', 'Descrizione' => 'Standard (1x)'],
+                ['IdMoltiplicatorePrezzo' => 2, 'Codice' => 'MP-02', 'Descrizione' => 'Urgente (1.5x)'],
+                ['IdMoltiplicatorePrezzo' => 3, 'Codice' => 'MP-03', 'Descrizione' => 'Extra Urgente (2x)'],
+            ]];
+        }
+
+        if (str_starts_with($endpoint, 'AnagraficaCertestObject')) {
+            return ['value' => [
+                ['IdAnagrafica' => 1, 'Codice' => 'OBJ-01', 'NomeAnagrafica' => 'Articolo Tessile'],
+                ['IdAnagrafica' => 2, 'Codice' => 'OBJ-02', 'NomeAnagrafica' => 'Componente Meccanico'],
+                ['IdAnagrafica' => 3, 'Codice' => 'OBJ-03', 'NomeAnagrafica' => 'Materiale Plastico'],
+            ]];
+        }
+
+        if (str_starts_with($endpoint, 'AnagraficaCertestService')) {
+            return ['value' => [
+                ['IdAnagrafica' => 1, 'Codice' => 'SRV-01', 'NomeAnagrafica' => 'Analisi Chimica'],
+                ['IdAnagrafica' => 2, 'Codice' => 'SRV-02', 'NomeAnagrafica' => 'Test Meccanico'],
+                ['IdAnagrafica' => 3, 'Codice' => 'SRV-03', 'NomeAnagrafica' => 'Prova Ambientale'],
+            ]];
+        }
+
+        // Cliente? list — get_clienti.php exits early in simulate mode, but guard here too
+        if (str_starts_with($endpoint, 'Cliente?')) {
+            return ['value' => []];
+        }
+
+        // Cliente(N)?$expand=Responsabili
+        if (str_starts_with($endpoint, 'Cliente(')) {
+            preg_match('/Cliente\((\d+)\)/', $endpoint, $m);
+            $clienteId = isset($m[1]) ? (int) $m[1] : 0;
+            return [
+                'IdCliente'    => $clienteId,
+                'Responsabili' => [
+                    ['IdClienteResponsabile' => 1, 'Nominativo' => 'Marco Bianchi'],
+                    ['IdClienteResponsabile' => 2, 'Nominativo' => 'Giulia Ferrari'],
+                    ['IdClienteResponsabile' => 3, 'Nominativo' => 'Andrea Russo'],
+                ],
+            ];
+        }
+
+        // --- CustomField dropdown values (get_customfield_values.php) ---
+
+        if (str_starts_with($endpoint, 'CustomField(')) {
+            preg_match('/CustomField\((\d+)\)/', $endpoint, $m);
+            $fieldId = isset($m[1]) ? (int) $m[1] : 0;
+            return [
+                'CustomFieldsValues' => [
+                    ['IdCustomFieldsValue' => $fieldId * 10 + 1, 'Valore' => 'Opzione A'],
+                    ['IdCustomFieldsValue' => $fieldId * 10 + 2, 'Valore' => 'Opzione B'],
+                    ['IdCustomFieldsValue' => $fieldId * 10 + 3, 'Valore' => 'Opzione C'],
+                ],
+            ];
+        }
+
+        // --- CommessaWeb OData calls (STEP 7 GET + STEP 10 verification) ---
+
+        preg_match('/\((\d+)\)/', $endpoint, $m);
+        $id = isset($m[1]) ? (int) $m[1] : $this->fakeCommessaId;
+
+        return [
+            'IdCommessa'           => $id,
+            'CodiceCommessa'       => "SIM-{$id}",
+            'CommesseCustomFields' => [],   // Empty → PATCH step is skipped correctly
+        ];
+    }
+
+    public function post(string $endpoint, array $payload): array
+    {
+        error_log("[SIMULATE] POST {$endpoint} payload=" . json_encode($payload));
+
+        // CommessaWeb creation
+        if ($endpoint === 'CommessaWeb') {
+            return [
+                'IdCommessa'     => $this->fakeCommessaId,
+                'CodiceCommessa' => "SIM-{$this->fakeCommessaId}",
+                'Richiedente'    => $payload['Richiedente'] ?? '',
+                'Descrizione'    => $payload['Descrizione'] ?? '',
+            ];
+        }
+
+        // Campione creation
+        if ($endpoint === 'Campione') {
+            return [
+                'IdCampione' => mt_rand(10001, 19999),
+                'Commessa'   => $payload['Commessa'] ?? null,
+                'Matrice'    => $payload['Matrice'] ?? null,
+            ];
+        }
+
+        // InviaCommessa / ImportaCommessa (currently commented out upstream)
+        return ['simulated' => true, 'endpoint' => $endpoint];
+    }
+
+    public function patch(string $endpoint, array $payload): array
+    {
+        error_log("[SIMULATE] PATCH {$endpoint} payload=" . json_encode($payload));
+
+        return [];
+    }
+
+    public function postMultipart(string $endpoint, string $filePath, string $fileName, array $extraFields = []): array
+    {
+        error_log("[SIMULATE] POST multipart {$endpoint} file={$fileName}");
+
+        return ['simulated' => true, 'file' => $fileName];
+    }
+}
@@ -0,0 +1,124 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php';
+
+use Dotenv\Dotenv;
+
+class VisualLimsApiClientXml
+{
+    private static $instance = null;
+    private $baseUrl;
+    private $username;
+    private $password;
+    private $token = null;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3));
+        $dotenv->load();
+
+        $this->baseUrl = $_ENV['API_BASE_URL'];
+        $this->username = $_ENV['API_USERNAME'];
+        $this->password = $_ENV['API_PASSWORD'];
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            self::$instance = new VisualLimsApiClientXml();
+        }
+        return self::$instance;
+    }
+
+    private function authenticate()
+    {
+        $ch = curl_init("{$this->baseUrl}/api/authentication/authenticate");
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+            'Username' => $this->username,
+            'Password' => $this->password
+        ]));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Content-Type: application/json',
+            'Accept: application/json'
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_auth_debug_xml.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false || $http_code != 200) {
+            throw new Exception("Autenticazione fallita: HTTP {$http_code}, Errore cURL: {$curl_error}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $token_data = json_decode($response, true);
+        $this->token = null;
+
+        if (is_array($token_data) && isset($token_data['token'])) {
+            $this->token = $token_data['token'];
+        } elseif (is_string($token_data) && !empty($token_data)) {
+            $this->token = trim($token_data, '"');
+        } elseif (is_string($response) && !empty($response)) {
+            $this->token = trim($response, '"');
+        }
+
+        if (empty($this->token)) {
+            throw new Exception("Token non ricevuto: " . substr($response, 0, 1000));
+        }
+    }
+
+    private function getToken()
+    {
+        if ($this->token === null) {
+            $this->authenticate();
+        }
+        return $this->token;
+    }
+
+    public function get($endpoint, $options = [])
+    {
+        $token = $this->getToken();
+        $query = http_build_query($options);
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}" . ($query ? '?' . $query : '');
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/xml"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_request_debug_xml.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta: {$curl_error}");
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("Errore nel recupero dati: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        // Verifica che la risposta sia XML
+        if (strpos($response, '<?xml') !== 0) {
+            throw new Exception("Risposta non valida: atteso formato XML, ricevuto: " . substr($response, 0, 1000));
+        }
+
+        return $response;
+    }
+}
@@ -0,0 +1,124 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php';
+
+use Dotenv\Dotenv;
+
+class VisualLimsApiClientXml
+{
+    private static $instance = null;
+    private $baseUrl;
+    private $username;
+    private $password;
+    private $token = null;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3));
+        $dotenv->load();
+
+        $this->baseUrl = $_ENV['API_BASE_URL'];
+        $this->username = $_ENV['API_USERNAME'];
+        $this->password = $_ENV['API_PASSWORD'];
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            self::$instance = new VisualLimsApiClientXml();
+        }
+        return self::$instance;
+    }
+
+    private function authenticate()
+    {
+        $ch = curl_init("{$this->baseUrl}/api/authentication/authenticate");
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
+            'Username' => $this->username,
+            'Password' => $this->password
+        ]));
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            'Content-Type: application/json',
+            'Accept: application/json'
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_auth_debug_xml.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false || $http_code != 200) {
+            throw new Exception("Autenticazione fallita: HTTP {$http_code}, Errore cURL: {$curl_error}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        $token_data = json_decode($response, true);
+        $this->token = null;
+
+        if (is_array($token_data) && isset($token_data['token'])) {
+            $this->token = $token_data['token'];
+        } elseif (is_string($token_data) && !empty($token_data)) {
+            $this->token = trim($token_data, '"');
+        } elseif (is_string($response) && !empty($response)) {
+            $this->token = trim($response, '"');
+        }
+
+        if (empty($this->token)) {
+            throw new Exception("Token non ricevuto: " . substr($response, 0, 1000));
+        }
+    }
+
+    private function getToken()
+    {
+        if ($this->token === null) {
+            $this->authenticate();
+        }
+        return $this->token;
+    }
+
+    public function get($endpoint, $options = [])
+    {
+        $token = $this->getToken();
+        $query = http_build_query($options);
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}" . ($query ? '?' . $query : '');
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/xml"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $log = fopen(__DIR__ . '/curl_request_debug_xml.log', 'w') ?: fopen('php://stderr', 'w');
+        curl_setopt($ch, CURLOPT_STDERR, $log);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        fclose($log);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta: {$curl_error}");
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("Errore nel recupero dati: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        // Verifica che la risposta sia XML
+        if (strpos($response, '<?xml') !== 0) {
+            throw new Exception("Risposta non valida: atteso formato XML, ricevuto: " . substr($response, 0, 1000));
+        }
+
+        return $response;
+    }
+}
@@ -0,0 +1,76 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>VisualLims Authentication</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            max-width: 600px;
+            margin: 20px auto;
+            padding: 20px;
+        }
+
+        #authButton {
+            padding: 10px 20px;
+            background-color: #007bff;
+            color: white;
+            border: none;
+            cursor: pointer;
+        }
+
+        #authButton:hover {
+            background-color: #0056b3;
+        }
+
+        #result {
+            margin-top: 20px;
+            padding: 10px;
+            border: 1px solid #ccc;
+            word-wrap: break-word;
+        }
+    </style>
+</head>
+
+<body>
+    <h1>VisualLims Authentication</h1>
+    <button id="authButton">Authenticate</button>
+    <div id="result"></div>
+
+    <script>
+        document.getElementById('authButton').addEventListener('click', async () => {
+            const resultDiv = document.getElementById('result');
+            resultDiv.textContent = 'Authenticating...';
+
+            try {
+                const response = await fetch('https://93.43.5.102/limsapi/api/authentication/authenticate', {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                    },
+                    body: JSON.stringify({
+                        Username: 'WebApiUserTest',
+                        Password: 'WebApiUserClienteTest'
+                    })
+                });
+
+                if (!response.ok) {
+                    throw new Error(`HTTP error! status: ${response.status}`);
+                }
+
+                const data = await response.json();
+                if (data && data.token) {
+                    resultDiv.textContent = `Token: ${data.token}`;
+                } else {
+                    resultDiv.textContent = 'Authentication failed: No token received';
+                }
+            } catch (error) {
+                resultDiv.textContent = `Error: ${error.message}`;
+            }
+        });
+    </script>
+</body>
+
+</html>
@@ -0,0 +1,51 @@
+<?php
+require_once dirname(__DIR__, 3) . '/vendor/autoload.php';
+
+use Dotenv\Dotenv;
+
+Dotenv::createImmutable(dirname(__DIR__, 3))->safeLoad();
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
+class DBHandlerSelect
+{
+    private static $instance = null;
+    private $pdo;
+
+    private function __construct()
+    {
+        $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3));
+        $dotenv->load();
+
+        $host = $_ENV['DB_HOST'];
+        $db = $_ENV['DB_DATABASE'];
+        $user = $_ENV['DB_USERNAME'];
+        $pass = $_ENV['DB_PASSWORD'];
+        $charset = 'utf8mb4';
+
+        $dsn = "mysql:host=$host;dbname=$db;charset=$charset";
+        $options = [
+            PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
+            PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+            PDO::ATTR_EMULATE_PREPARES   => false,
+        ];
+
+        try {
+            $this->pdo = new PDO($dsn, $user, $pass, $options);
+        } catch (PDOException $e) {
+            die("Database connection failed: " . $e->getMessage());
+        }
+    }
+
+    public static function getInstance()
+    {
+        if (self::$instance === null) {
+            self::$instance = new DBHandlerSelect();
+        }
+        return self::$instance;
+    }
+
+    public function getConnection()
+    {
+        return $this->pdo;
+    }
+}
@@ -0,0 +1,61 @@
+<?php
+
+use PHPMailer\PHPMailer\PHPMailer;
+use PHPMailer\PHPMailer\Exception;
+use Dotenv\Dotenv;
+
+// Carica le variabili di ambiente
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php'; // Assicurati che PHPMailer e Dotenv siano installati con Composer
+
+$dotenv = Dotenv::createImmutable(dirname(__DIR__, 2)); // Se la cartella `class` è a 2 livelli sopra la root
+$dotenv->load();
+
+function sendEmail($to, $subject, $body, $attachments = [], $cc = [], $bcc = [])
+{
+    // Configurazione SMTP
+    $mail = new PHPMailer(true);
+    try {
+        // Configurazione server SMTP con dati da .env
+        $mail->isSMTP();
+        $mail->Host       = $_ENV['MAIL_HOST'] ?? 'smtp.example.com';
+        $mail->SMTPAuth   = true;
+        $mail->Username   = $_ENV['MAIL_USERNAME'] ?? 'email@example.com';
+        $mail->Password   = $_ENV['MAIL_PASSWORD'] ?? 'password';
+        $mail->SMTPSecure = $_ENV['MAIL_ENCRYPTION'] ?? PHPMailer::ENCRYPTION_STARTTLS;
+        $mail->Port       = $_ENV['MAIL_PORT'] ?? 587;
+
+        // Mittente
+        $mail->setFrom($_ENV['MAIL_FROM_ADDRESS'] ?? 'default@example.com', $_ENV['MAIL_FROM_NAME'] ?? 'Default Name');
+
+        // Destinatari principali
+        foreach ((array)$to as $recipient) {
+            $mail->addAddress($recipient);
+        }
+
+        // Destinatari CC
+        foreach ((array)$cc as $recipient) {
+            $mail->addCC($recipient);
+        }
+
+        // Destinatari BCC
+        foreach ((array)$bcc as $recipient) {
+            $mail->addBCC($recipient);
+        }
+
+        // Allegati
+        foreach ((array)$attachments as $file) {
+            $mail->addAttachment($file);
+        }
+
+        // Contenuto dell'email
+        $mail->isHTML(true);
+        $mail->Subject = $subject;
+        $mail->Body    = $body;
+
+        // Invia l'email
+        $mail->send();
+        return ['success' => true, 'message' => 'Email inviata con successo.'];
+    } catch (Exception $e) {
+        return ['success' => false, 'message' => "Errore nell'invio dell'email: {$mail->ErrorInfo}"];
+    }
+}