// Define custom magic link roles
$magic_roles = array(
    'content_editor' => array(
        'capabilities' => array('edit_posts', 'edit_pages'),
        'expiry' => 3600 // 1 hour
    ),
    'plugin_manager' => array(
        'capabilities' => array('activate_plugins', 'deactivate_plugins'),
        'expiry' => 1800 // 30 minutes
    )
);

// Generate magic link programmatically
function generate_magic_link($user_id, $role = 'administrator', $expiry = 900) {
    $token = wp_generate_password(32, false);
    $link_id = wp_insert_post(array(
        'post_title' => 'Magic Link: ' . $user_id,
        'post_content' => '',
        'post_status' => 'publish',
        'post_type' => 'magic_link'
    ));

    update_post_meta($link_id, '_magic_token', $token);
    update_post_meta($link_id, '_magic_user_id', $user_id);
    update_post_meta($link_id, '_magic_role', $role);
    update_post_meta($link_id, '_magic_expiry', time() + $expiry);

    return home_url('/magic-login/?token=' . $token . '&id=' . $link_id);
}

function validate_magic_token($token, $link_id) {
    $stored_token = get_post_meta($link_id, '_magic_token', true);
    $expiry = get_post_meta($link_id, '_magic_expiry', true);
    $used = get_post_meta($link_id, '_magic_used', true);

    if ($token !== $stored_token) {
        return new WP_Error('invalid_token', 'Invalid magic link token');
    }

    if (time() > $expiry) {
        return new WP_Error('expired_token', 'Magic link has expired');
    }

    if ($used) {
        return new WP_Error('used_token', 'Magic link has already been used');
    }

    return true;
}

function authenticate_magic_user($link_id) {
    $user_id = get_post_meta($link_id, '_magic_user_id', true);
    $role = get_post_meta($link_id, '_magic_role', true);

    // Set user role temporarily
    $user = get_user_by('id', $user_id);
    $user->set_role($role);

    // Log the access
    magic_link_log_access($user_id, $link_id);

    // Mark link as used
    update_post_meta($link_id, '_magic_used', true);

    return $user;
}

Subject: Your WordPress Admin Access Link

Hi {user_name},

You have requested access to {site_name} WordPress admin.

Click the link below to access the admin panel:
{magic_link}

This link will expire in {expiry_time} minutes and can only be used once.

If you didn't request this access, please ignore this email.

Best regards,
{site_name} Team

function custom_magic_link_email($user_id, $magic_link, $expiry) {
    $user = get_user_by('id', $user_id);
    $site_name = get_bloginfo('name');

    $subject = "🔐 Secure Admin Access - {$site_name}";
    $message = "
    <h2>WordPress Admin Access</h2>
    <p>Hello {$user->display_name},</p>
    <p>You have requested secure access to {$site_name}.</p>
    <p><strong>Your magic link:</strong></p>
    <p><a href='{$magic_link}' style='background:#007cba;color:white;padding:10px 20px;text-decoration:none;border-radius:5px;'>Access Admin Panel</a></p>
    <p><small>This link expires in {$expiry} minutes and can only be used once.</small></p>
    ";

    return array('subject' => $subject, 'message' => $message);
}

function magic_link_log_access($user_id, $link_id, $ip_address, $user_agent) {
    global $wpdb;

    $wpdb->insert(
        $wpdb->prefix . 'magic_link_logs',
        array(
            'user_id' => $user_id,
            'link_id' => $link_id,
            'ip_address' => $ip_address,
            'user_agent' => $user_agent,
            'access_time' => current_time('mysql'),
            'action' => 'login'
        )
    );
}

// Multi-site magic link configuration
define('MAGIC_LINK_MULTISITE', true);
define('MAGIC_LINK_SITE_SPECIFIC', true);

// Site-specific tokens
function generate_site_magic_link($user_id, $site_id, $role) {
    // Generate site-specific magic link
    $site_url = get_site_url($site_id);
    $token = generate_magic_token($user_id, $site_id);

    return $site_url . '/magic-login/?token=' . $token;
}

// REST API endpoint for magic links
add_action('rest_api_init', function() {
    register_rest_route('magic-link/v1', '/generate', array(
        'methods' => 'POST',
        'callback' => 'api_generate_magic_link',
        'permission_callback' => function() {
            return current_user_can('manage_options');
        }
    ));
});

function api_generate_magic_link($request) {
    $user_id = $request->get_param('user_id');
    $role = $request->get_param('role');
    $expiry = $request->get_param('expiry') ?: 900;

    $magic_link = generate_magic_link($user_id, $role, $expiry);

    return new WP_REST_Response(array(
        'success' => true,
        'magic_link' => $magic_link,
        'expires_at' => time() + $expiry
    ), 200);
}

// Enable magic link debugging
define('MAGIC_LINK_DEBUG', true);

// Log all magic link activities
add_action('magic_link_generated', function($link_id, $user_id) {
    error_log("Magic link generated: {$link_id} for user: {$user_id}");
});

add_action('magic_link_used', function($link_id, $user_id) {
    error_log("Magic link used: {$link_id} by user: {$user_id}");
});