Session Loglama Sistemi

CREATE TABLE session_termination_logs (
    id BIGINT UNSIGNED AUTO_INCREMENT PRIMARY KEY,

    -- Kullanıcı Bilgisi
    user_id BIGINT UNSIGNED NOT NULL,
    user_email VARCHAR(255) NOT NULL,
    user_name VARCHAR(255) NOT NULL,

    -- Termination Nedeni
    termination_reason ENUM('lifo', 'manual', 'timeout', 'logout', 'admin') NOT NULL,

    -- YENİ OTURUM (Kick Eden)
    new_session_id VARCHAR(255) NOT NULL,
    new_login_token VARCHAR(64) NOT NULL,
    new_ip_address VARCHAR(45) NOT NULL,
    new_user_agent TEXT NOT NULL,
    new_device_type VARCHAR(20) NOT NULL, -- desktop, mobile, tablet
    new_device_name VARCHAR(100) NOT NULL,
    new_browser VARCHAR(50) NOT NULL,
    new_platform VARCHAR(50) NOT NULL,
    new_country VARCHAR(100) NULL, -- Geolocation
    new_city VARCHAR(100) NULL,
    new_latitude DECIMAL(10, 8) NULL,
    new_longitude DECIMAL(11, 8) NULL,
    new_fingerprint VARCHAR(64) NULL, -- Browser fingerprint

    -- ESKİ OTURUM (Atılan)
    old_session_id VARCHAR(255) NOT NULL,
    old_login_token VARCHAR(64) NULL,
    old_ip_address VARCHAR(45) NULL,
    old_user_agent TEXT NULL,
    old_device_type VARCHAR(20) NULL,
    old_device_name VARCHAR(100) NULL,
    old_browser VARCHAR(50) NULL,
    old_platform VARCHAR(50) NULL,
    old_country VARCHAR(100) NULL,
    old_city VARCHAR(100) NULL,
    old_last_activity TIMESTAMP NULL,

    -- Meta Bilgiler
    notification_sent BOOLEAN DEFAULT FALSE,
    notification_method VARCHAR(20) NULL, -- email, sms, push
    notification_sent_at TIMESTAMP NULL,
    admin_viewed BOOLEAN DEFAULT FALSE,
    admin_viewed_at TIMESTAMP NULL,
    admin_viewed_by BIGINT UNSIGNED NULL,

    -- Timestamps
    terminated_at TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
    created_at TIMESTAMP NULL,
    updated_at TIMESTAMP NULL,

    -- Indexes
    INDEX idx_user_id (user_id),
    INDEX idx_terminated_at (terminated_at),
    INDEX idx_termination_reason (termination_reason),
    INDEX idx_notification_sent (notification_sent),

    -- Foreign Keys
    CONSTRAINT fk_user FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
    CONSTRAINT fk_admin_viewer FOREIGN KEY (admin_viewed_by) REFERENCES users(id) ON DELETE SET NULL
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;

// DeviceService.php:468 - enforceDeviceLimit() metoduna eklenecek

protected function enforceDeviceLimit(User $user, string $currentSessionId): void
{
    $limit = $this->getDeviceLimit($user);

    $sessions = DB::table($this->table)
        ->where('user_id', $user->id)
        ->orderBy('last_activity', 'asc')
        ->get();

    $count = $sessions->count();

    if ($count > $limit) {
        $toRemove = $count - $limit;

        $oldSessions = $sessions
            ->filter(fn($s) => $s->session_id !== $currentSessionId)
            ->take($toRemove);

        // Yeni session bilgisi
        $newSession = DB::table($this->table)
            ->where('session_id', $currentSessionId)
            ->first();

        foreach ($oldSessions as $old) {
            // 🔥 LOG KAYDET (termination_reason: lifo)
            $this->logSessionTermination(
                user: $user,
                reason: 'lifo',
                newSession: $newSession,
                oldSession: $old
            );

            // Session'ı sil
            DB::table($this->table)->where('id', $old->id)->delete();
        }
    }
}

namespace Modules\Muzibu\App\Services;

class SessionTerminationLogger
{
    public function logTermination(
        User $user,
        string $reason,
        $newSession,
        $oldSession
    ): void {
        $logData = [
            // User
            'user_id' => $user->id,
            'user_email' => $user->email,
            'user_name' => $user->name,
            'termination_reason' => $reason,

            // New Session
            'new_session_id' => $newSession->session_id,
            'new_login_token' => $newSession->login_token,
            'new_ip_address' => $newSession->ip_address,
            'new_user_agent' => $newSession->user_agent,
            'new_device_type' => $newSession->device_type,
            'new_device_name' => $newSession->device_name,
            'new_browser' => $newSession->browser,
            'new_platform' => $newSession->platform,

            // Geolocation (IP'den)
            'new_country' => $this->getCountryFromIp($newSession->ip_address),
            'new_city' => $this->getCityFromIp($newSession->ip_address),

            // Old Session
            'old_session_id' => $oldSession->session_id,
            'old_login_token' => $oldSession->login_token ?? null,
            'old_ip_address' => $oldSession->ip_address,
            'old_user_agent' => $oldSession->user_agent,
            'old_device_type' => $oldSession->device_type,
            'old_device_name' => $oldSession->device_name,
            'old_browser' => $oldSession->browser,
            'old_platform' => $oldSession->platform,
            'old_last_activity' => $oldSession->last_activity,

            'terminated_at' => now(),
        ];

        DB::table('session_termination_logs')->insert($logData);

        // Notification gönder
        $this->sendNotification($user, $logData);
    }

    protected function sendNotification(User $user, array $logData): void
    {
        // Email/SMS notification
        // Event dispatch: SessionTerminatedEvent
    }
}