Muzibu Device Limit Sistemi

/**
 * Device = Browser (Tarayici)
 * - Ayni tarayici = ayni cihaz (cookie ile tespit)
 * - Farkli tarayici = farkli cihaz (LIFO uygula)
 */
function registerSession(User $user): void
{
    $lifetime = (int) setting('auth_session_lifetime', 10080);
    $existingToken = request()->cookie('mzb_login_token');

    // 1. AYNI TARAYICI MI? (Cookie kontrolu)
    if ($existingToken) {
        $existing = DB::table('user_active_sessions')
            ->where('user_id', $user->id)
            ->where('login_token', $existingToken)
            ->first();

        if ($existing) {
            // AYNI TARAYICI - Mevcut kaydi guncelle
            DB::table('user_active_sessions')
                ->where('id', $existing->id)
                ->update([
                    'session_id' => session()->getId(),
                    'last_activity' => now(),
                    'expires_at' => now()->addMinutes($lifetime),
                ]);

            // Cookie'yi yenile (sure uzat)
            cookie()->queue('mzb_login_token', $existingToken, $lifetime);
            return; // YENI TOKEN OLUSTURMA!
        }
    }

    // 2. FARKLI TARAYICI - Lock al (race condition)
    $lock = Cache::lock("user_login:{$user->id}", 10);
    if (!$lock->get()) {
        throw new \Exception("Lutfen birkaç saniye bekleyin...");
    }

    try {
        // 3. LIFO - Tum eski session'lari at (Limit=1)
        DB::table('user_active_sessions')
            ->where('user_id', $user->id)
            ->get()
            ->each(function($session) {
                // Atomic terminate: DB + Redis + Cache
                $this->terminateSessionAtomic($session);
            });

        // 4. Yeni session olustur
        $loginToken = bin2hex(random_bytes(32));

        DB::table('user_active_sessions')->insert([
            'user_id' => $user->id,
            'login_token' => $loginToken,
            'session_id' => session()->getId(),
            'device_type' => $this->getDeviceType(),
            'browser' => $agent->browser(),
            'expires_at' => now()->addMinutes($lifetime),
            'created_at' => now(),
        ]);

        // 5. Cookie olustur
        cookie()->queue('mzb_login_token', $loginToken, $lifetime);

    } finally {
        $lock->release();
    }
}