# Apache .htaccess Rewrite Rules for KhiladiZone PHP REST API
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /

    # Allow CORS Preflight
    Header set Access-Control-Allow-Origin "*"
    Header set Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE"
    Header set Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With, bypass-tunnel-reminder, Bypass-Tunnel-Remainder"

    # Handle OPTIONS preflight directly
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^(.*)$ - [R=200,L]

    # Map legacy Node.js route endpoints to PHP endpoints
    RewriteRule ^create-razorpay-order$ api/create-razorpay-order.php [L,QSA]
    RewriteRule ^verify-razorpay-payment$ api/verify-razorpay-payment.php [L,QSA]
    RewriteRule ^api/create-razorpay-order$ api/create-razorpay-order.php [L,QSA]
    RewriteRule ^api/verify-razorpay-payment$ api/verify-razorpay-payment.php [L,QSA]
    RewriteRule ^api/razorpay-webhook$ api/razorpay-webhook.php [L,QSA]

    # Map user wallet route: /api/user/{id_or_email}/wallet -> /api/user/wallet.php?id={id_or_email}
    RewriteRule ^api/user/([^/]+)/wallet$ api/user/wallet.php?id=$1 [L,QSA]

    # Map user fcm token route: /api/user/fcm-token -> /api/user/fcm-token.php
    RewriteRule ^api/user/fcm-token$ api/user/fcm-token.php [L,QSA]

    # Map Google auth route: /api/auth/google -> /api/auth/google.php
    RewriteRule ^api/auth/google$ api/auth/google.php [L,QSA]

    # Map Matches, Transactions, Leaderboard, Health
    RewriteRule ^api/matches$ api/matches.php [L,QSA]
    RewriteRule ^api/transactions$ api/transactions.php [L,QSA]
    RewriteRule ^api/leaderboard$ api/leaderboard.php [L,QSA]
    RewriteRule ^health$ api/health.php [L,QSA]
    RewriteRule ^api/health$ api/health.php [L,QSA]
</IfModule>
