new system prototype

lib/repositories/SessionRepo.php

@@ -0,0 +1,61 @@
+<?php
+
+class SessionRepo
+{
+    public static function create(
+        PDO $pdo,
+        string $token,
+        string $userID,
+        string $role,
+        string $entityID,
+        int $ttl,
+        bool $temp = false
+    ): void {
+        $now = time();
+
+        $pdo->prepare("
+            INSERT INTO session (token, userID, role, entityID, createdAt, expiresAt, temp)
+            VALUES (:t, :uid, :role, :eid, :ca, :ea, :tmp)
+        ")->execute([
+            ':t'    => $token,
+            ':uid'  => $userID,
+            ':role' => $role,
+            ':eid'  => $entityID,
+            ':ca'   => $now,
+            ':ea'   => $now + $ttl,
+            ':tmp'  => (int) $temp,
+        ]);
+    }
+
+    /**
+     * @return array<string, mixed>|null  Null when token is missing or expired.
+     */
+    public static function findByToken(PDO $pdo, string $token): ?array
+    {
+        $stmt = $pdo->prepare(
+            "SELECT * FROM session WHERE token = :t AND expiresAt >= :now"
+        );
+        $stmt->execute([':t' => $token, ':now' => time()]);
+        $row = $stmt->fetch(PDO::FETCH_ASSOC);
+
+        return $row ?: null;
+    }
+
+    public static function revoke(PDO $pdo, string $token): void
+    {
+        $pdo->prepare("DELETE FROM session WHERE token = :t")
+            ->execute([':t' => $token]);
+    }
+
+    /**
+     * Remove all expired sessions.
+     * @return int Number of rows deleted.
+     */
+    public static function cleanup(PDO $pdo): int
+    {
+        $stmt = $pdo->prepare("DELETE FROM session WHERE expiresAt < :now");
+        $stmt->execute([':now' => time()]);
+
+        return $stmt->rowCount();
+    }
+}