Init Git Prod Mars 2026

messages/api/close_conversation.php

@@ -0,0 +1,29 @@
+<?php
+// /messages/api/close_conversation.php
+declare(strict_types=1);
+require_once __DIR__ . '/../_bootstrap.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+if (!hash_equals($_SESSION['_csrf'] ?? '', $_POST['_csrf'] ?? '')) {
+    json_response(['error' => 'csrf'], 419);
+}
+
+$role   = $GLOBALS['MESSAGES_CTX']['role'];
+$meId   = $GLOBALS['MESSAGES_CTX']['me_id'];
+$convId = (int)($_POST['conversation_id'] ?? 0);
+$close  = (int)($_POST['close'] ?? 1);
+
+if ($convId <= 0) json_response(['error' => 'bad_params'], 400);
+
+// Vérifie l'accès (participant à la conversation)
+assert_conversation_access($pdo, $convId, $role, $meId);
+
+// Met à jour le statut
+if ($close) {
+    $pdo->prepare("UPDATE conversations SET status='closed', closed_at=NOW() WHERE id=?")->execute([$convId]);
+} else {
+    $pdo->prepare("UPDATE conversations SET status='open', closed_at=NULL WHERE id=?")->execute([$convId]);
+}
+
+json_response(['ok' => true, 'status' => $close ? 'closed' : 'open']);