<?php
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Methods: GET, POST, OPTIONS");
header("Access-Control-Allow-Headers: Content-Type, Authorization, X-API-KEY");
header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");

if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
    http_response_code(200);
    exit;
}

header('Content-Type: application/json');

// TODO: Implementasi logic summary di sini
// Validasi Authorization token
/*
$headers = getallheaders();
if (!isset($headers['Authorization'])) {
    http_response_code(401);
    echo json_encode(['error' => 'unauthorized']);
    exit;
}

// Validasi X-API-KEY
if (!isset($_SERVER['HTTP_X_API_KEY']) || $_SERVER['HTTP_X_API_KEY'] !== 'RETRIBUSI-DASHBOARD-KEY') {
    http_response_code(401);
    echo json_encode(['error' => 'unauthorized']);
    exit;
}

// Logic summary
$date = $_GET['date'] ?? date('Y-m-d');
$location_code = $_GET['location_code'] ?? null;

// ... kode summary yang sudah ada ...

echo json_encode([
    'date' => $date,
    'location_code' => $location_code,
    'total_vehicle' => 0,
    'total_person' => 0,
    'total_amount' => 0
]);
*/