<?php

declare(strict_types=1);

namespace BrettParson\MiniRoute\Tests\Fixtures;

use ArrayObject;
use BrettParson\MiniRoute\Http\RequestInterface;
use BrettParson\MiniRoute\Http\ResponseInterface;
use BrettParson\MiniRoute\Middleware\MiddlewareInterface;

/**
 * Logs before/after into a shared log. Stands in for the real app's CSRF
 * guard, applied to the /admin prefix for POST only.
 */
final class CsrfLoggingMiddleware implements MiddlewareInterface
{
    public function __construct(private readonly ArrayObject $log)
    {
    }

    public function handle(RequestInterface $request, callable $next): ResponseInterface
    {
        $this->log->append('csrf:before');
        $response = $next($request);
        $this->log->append('csrf:after');

        return $response;
    }
}