<?php
/**
 * get_reset_requests.php — Ambil daftar permintaan reset password (Admin only)
 */
session_start();
require_once 'koneksi.php';
header('Content-Type: application/json');

if (!isset($_SESSION['user_role']) || $_SESSION['user_role'] !== 'admin') {
    echo json_encode(['success' => false, 'message' => 'Akses ditolak']);
    exit;
}

$stmt = $conn->prepare("
    SELECT pr.id, pr.user_id, pr.email, u.nama, u.role,
           DATE_FORMAT(pr.created_at, '%d %M %Y %H:%i') as waktu
    FROM password_resets pr
    JOIN users u ON u.id = pr.user_id
    WHERE pr.status = 'pending'
    ORDER BY pr.created_at ASC
");
$stmt->execute();
$result = $stmt->get_result();

$requests = [];
while ($row = $result->fetch_assoc()) {
    $requests[] = $row;
}

echo json_encode(['success' => true, 'data' => $requests]);
$stmt->close();
$conn->close();