//This is a simple example of some of the cool things SlenderApi can do.
//In your UserModel, this is how simple it is to setup validation.
public static function getValidationRules(): array
{
    return array(
        'id' => 'isint',
        'email_address' => 'email|maxlength:200|minlength:3',
        'password' => 'required|minlength:8|maxlength:20',
        'user_name' => 'required|maxlength:20|alphanumeric|minlength:3',
        'first_name' => 'maxlength:100',
        'last_name' => 'maxlength:100',
    );
}

//The code below would be in your UserLib.php.
//Grab the post request from a login form.
$credentials = $this->request->getCredentialsFromAuthorization();
$this->email = strtolower($credentials->username);
$this->password = $credentials->password;

//Create an array with only these 2 fields.
$data = array(
    'email_address' => $this->email,
    'password' => $this->password
);

//Access the user model object.
$userModal = new Models\UserModel($this->db, null);

//Create custom validation for just these 2 fields.
$validationRules = Validation::getValidationRulesByFields($userModal->getValidationRules(), array('email_address', 'password'));

//If the validation comes back as failed, output the errors in JSON.
//The code will stop here, the save will not execute.
//I thought the save function automatically ran validation and did an error output?
$errors = Validation::getErrors($data, $validationRules);
if (!empty($errors)) {
    $this->response->outputResponse(400, null, $errors);
}

//If all is good, save the data.
//Grab the logged in user id and pass it to the save.
//If no id is passed or 0 is passed it will insert, otherwise it's an update.
$userModal->save($updateData, $this->loginUser->id);

//Once you have created your DB, run install_queries.sql to create your users and auth tables.
//A default root admin user will be inserted. The email and password are: youremail@test.com changeme123!
//IMPORTANT: Use the users/login api call in postman, then the users/save api call to update the email and password.

//The top line is the only thing you need to change.
//Change this line to point to your setup files for dev/staging/prod.
//It is recommended to move your env files back a directory for security purposes.
//Example: ../api_config/env_dev.env and ../api_config/settings_dev.settings.
$cfg = array_merge(parse_ini_file('env_dev.env'), parse_ini_file('settings_dev.settings'));

//Set env to dev or prod, turn system error messages on and off
[environment]
environment.code = 0
environment.status = 1
environment.debug = true

//Configure your database connection
[database]
database.host = "localhost"
database.database = "yourdbname"
database.username = "username"
database.password = "password"

[cookie]
cookie.domain = yourdomain.com

[version]
version = "1.0.0"

[database]
database.date_format = "Y-m-d"
database.datetime_format = "Y-m-d G:i:s"

[cookie]
cookie.auth.name = access_token
cookie.user.name = user
cookie.expire = 6048000
cookie.path = "/"
cookie.secure = true
cookie.httponly = true
cookie.samesite = "none"

[token]
//JWT Custom Token Secret
token.secret = "100101110010100010011100101010010001010101"

[request]
//Add all controller/methods that do not require authentication here.
//For UsersController/Register you would put users.register.
request.unauthenticated_methods = "users.register,users.login,users.logout,users.users.forgotPassword,users.resetPassword,users.authenticate"
//Lock down your API so only certain domains can call it.
request.allowed_origins = "https://yourdomain.com/"
//If you have an admin domain, set it here, must have admin role to access it.
request.admin_origins = "https://admin.yourdomain.com/"

[resource]
//Leave this at 2.
resource.parent_resource_depth = 2

[error log]
//Configure error logs location.
error.log = "/home/logs/error_log"

[site url]
//Specify the URL to your API.
site.url = "api.yourdomain.com"