From 6e35fbc4fbd8f065cbfda1af8d8449fd8a5d71cc Mon Sep 17 00:00:00 2001
From: solocla <info@claudiosironi.com>
Date: Sat, 22 Aug 2026 16:34:10 +0200
Subject: [PATCH] api getme

---
 public/api/api_me_role.php | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 public/api/api_me_role.php

diff --git a/public/api/api_me_role.php b/public/api/api_me_role.php
new file mode 100644
index 00000000..eb22c1c5
--- /dev/null
+++ b/public/api/api_me_role.php
@@ -0,0 +1,33 @@
+<?php
+
+/**
+ * api_me_role.php
+ * --------------------------------------------------------------------------
+ * Restituisce il ruolo dell'utente autenticato e un flag comodo
+ * "is_staff" (Admin o teacher) per abilitare le funzioni insegnante nell'app.
+ *
+ * Posizione: public/api/api_me_role.php
+ * Metodo:    GET
+ * Auth:      Bearer token (Sanctum) via _bootstrap.php
+ * --------------------------------------------------------------------------
+ */
+
+require_once __DIR__ . '/_bootstrap.php';
+
+$roleId = (int) $user->role_id;
+
+// nome ruolo da auth_roles (per debug / display)
+$stmt = $db->prepare("SELECT name FROM auth_roles WHERE id = :rid LIMIT 1");
+$stmt->execute([':rid' => $roleId]);
+$roleRow = $stmt->fetch(PDO::FETCH_ASSOC);
+$roleName = $roleRow ? (string) $roleRow['name'] : '';
+
+// Admin = 1, teacher = 3  → staff (accesso pannello classi)
+$isStaff = in_array($roleId, [1, 3], true);
+
+echo json_encode([
+    'success'   => true,
+    'role_id'   => $roleId,
+    'role_name' => $roleName,
+    'is_staff'  => $isStaff,
+], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);