Add roadmap management, service worker, and user invitation features

- Implemented roadmap.php for managing roadmap items with filtering options by quarter and status.
- Added a service worker (sw.js) to handle push notifications and click events for calendar appointments.
- Created users.php for admin to manage team members and invitations, including user creation and deletion functionalities.

users.php

@@ -0,0 +1,269 @@
+<?php
+/**
+ * Fociz Team & Uitnodigingen Beheer (Enkel voor Admin)
+ */
+
+require_once __DIR__ . '/includes/auth.php';
+$adminUser = require_admin();
+$currentUser = $adminUser;
+$db = get_db_connection();
+
+$message = null;
+$generatedLink = null;
+$error = null;
+
+// Uitnodiging aanmaken
+if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['action']) && $_POST['action'] === 'create_invite') {
+    $email = strtolower(trim($_POST['email'] ?? ''));
+    $role = in_array($_POST['role'] ?? '', ['ADMIN', 'MEMBER']) ? $_POST['role'] : 'MEMBER';
+
+    if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
+        $error = "Voer een geldig e-mailadres in.";
+    } else {
+        // Controleer of e-mail al bestaat
+        $stmtCheck = $db->prepare("SELECT id FROM users WHERE email = ?");
+        $stmtCheck->execute([$email]);
+        if ($stmtCheck->fetch()) {
+            $error = "Er bestaat al een gebruiker met dit e-mailadres.";
+        } else {
+            $token = create_invite($adminUser['id'], $email, $role);
+            $baseUrl = rtrim(APP_URL, '/');
+            $generatedLink = "{$baseUrl}/auth/invite.php?token={$token}";
+            $message = "Uitnodigingslink succesvol aangemaakt!";
+        }
+    }
+}
+
+// Uitnodiging intrekken
+if (isset($_GET['delete_invite'])) {
+    $inviteId = (int)$_GET['delete_invite'];
+    $stmtDel = $db->prepare("DELETE FROM invites WHERE id = ?");
+    $stmtDel->execute([$inviteId]);
+    header('Location: /users.php');
+    exit;
+}
+
+// Gebruiker verwijderen
+if (isset($_GET['delete_user'])) {
+    $delUserId = (int)$_GET['delete_user'];
+    if ($delUserId !== (int)$adminUser['id']) {
+        $stmtDelUser = $db->prepare("DELETE FROM users WHERE id = ?");
+        $stmtDelUser->execute([$delUserId]);
+    }
+    header('Location: /users.php');
+    exit;
+}
+
+// Haal alle gebruikers op
+$users = $db->query("SELECT * FROM users ORDER BY created_at DESC")->fetchAll();
+
+// Haal alle uitnodigingen op
+$invites = $db->query("
+    SELECT i.*, u.name as inviter_name 
+    FROM invites i 
+    JOIN users u ON i.created_by_id = u.id 
+    ORDER BY i.created_at DESC
+")->fetchAll();
+
+$pageTitle = 'Team & Uitnodigingen — Fociz';
+require_once __DIR__ . '/includes/header.php';
+?>
+
+<div class="space-y-6 max-w-7xl mx-auto pb-12">
+    <!-- Header -->
+    <div class="bg-white dark:bg-[#111622] border border-slate-200 dark:border-slate-800/80 rounded-2xl p-6 sm:p-7 shadow-xs transition">
+        <div class="flex items-center space-x-2 text-indigo-600 dark:text-indigo-400 text-xs font-bold uppercase tracking-wider mb-1">
+            <i data-lucide="shield" class="w-4 h-4"></i>
+            <span>Beheerderspaneel</span>
+        </div>
+        <h1 class="text-2xl sm:text-3xl font-black text-slate-900 dark:text-white tracking-tight">
+            Team & Uitnodigingen
+        </h1>
+        <p class="text-slate-500 dark:text-slate-400 text-xs sm:text-sm mt-1">
+            Fociz is strikt afgesloten: nieuwe collega's kunnen enkel toegang krijgen na het ontvangen van een uitnodigingslink en verplichte 2FA-activatie.
+        </p>
+    </div>
+
+    <?php if ($error): ?>
+        <div class="p-4 rounded-2xl bg-red-500/10 border border-red-500/30 text-red-700 dark:text-red-400 text-xs font-semibold flex items-center space-x-2">
+            <i data-lucide="alert-triangle" class="w-4 h-4"></i>
+            <span><?= htmlspecialchars($error) ?></span>
+        </div>
+    <?php endif; ?>
+
+    <?php if ($message && $generatedLink): ?>
+        <div class="p-5 rounded-2xl bg-teal-50/80 dark:bg-teal-950/30 border border-teal-200 dark:border-teal-800/60 text-slate-900 dark:text-white space-y-2 shadow-xs transition">
+            <div class="flex items-center space-x-2 text-teal-700 dark:text-teal-400 font-bold text-xs">
+                <i data-lucide="check-circle-2" class="w-4 h-4"></i>
+                <span><?= htmlspecialchars($message) ?></span>
+            </div>
+            <p class="text-xs text-slate-600 dark:text-slate-300">
+                Kopieer onderstaande beveiligde registratielink en stuur deze naar de collega:
+            </p>
+            <div class="flex items-center space-x-2 bg-white dark:bg-[#0c0f17] p-2.5 rounded-xl border border-teal-200 dark:border-slate-800">
+                <input type="text" readonly id="inviteLinkInput" value="<?= htmlspecialchars($generatedLink) ?>" class="bg-transparent text-teal-700 dark:text-teal-300 font-mono text-xs flex-1 outline-none">
+                <button onclick="copyInviteLink()" class="px-3 py-1.5 bg-indigo-600 hover:bg-indigo-500 text-white font-bold text-xs rounded-xl transition flex items-center space-x-1 cursor-pointer">
+                    <i data-lucide="copy" class="w-3.5 h-3.5"></i>
+                    <span id="copyBtnText">Kopiëren</span>
+                </button>
+            </div>
+        </div>
+    <?php endif; ?>
+
+    <!-- Uitnodiging Genereren Kaart -->
+    <div class="bg-white dark:bg-[#111622] border border-slate-200 dark:border-slate-800/80 rounded-2xl p-6 sm:p-7 shadow-xs transition">
+        <h3 class="text-base font-bold text-slate-900 dark:text-white mb-4 flex items-center space-x-2">
+            <i data-lucide="user-plus" class="w-5 h-5 text-indigo-600 dark:text-indigo-400"></i>
+            <span>Nieuwe Collega Uitnodigen</span>
+        </h3>
+
+        <form method="POST" action="/users.php" class="grid grid-cols-1 md:grid-cols-12 gap-3 items-end">
+            <input type="hidden" name="action" value="create_invite">
+
+            <div class="md:col-span-6">
+                <label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">E-mailadres van collega</label>
+                <input type="email" name="email" required placeholder="collega@bedrijf.nl" class="w-full bg-slate-50 dark:bg-[#0c0f17] border border-slate-300 dark:border-slate-800 rounded-xl px-4 py-2.5 text-slate-900 dark:text-white placeholder-slate-400 dark:placeholder-slate-500 focus:outline-none focus:ring-1 focus:ring-indigo-500 text-xs">
+            </div>
+
+            <div class="md:col-span-3">
+                <label class="block text-xs font-semibold text-slate-700 dark:text-slate-300 mb-1">Rol</label>
+                <select name="role" class="w-full bg-slate-50 dark:bg-[#0c0f17] border border-slate-300 dark:border-slate-800 rounded-xl px-3 py-2.5 text-slate-900 dark:text-white text-xs focus:outline-none focus:ring-1 focus:ring-indigo-500">
+                    <option value="MEMBER">Collega (Standaard)</option>
+                    <option value="ADMIN">Mede-beheerder</option>
+                </select>
+            </div>
+
+            <div class="md:col-span-3">
+                <button type="submit" class="w-full bg-indigo-600 hover:bg-indigo-500 text-white font-bold py-2.5 px-4 rounded-xl text-xs transition shadow-xs flex items-center justify-center space-x-2 cursor-pointer">
+                    <i data-lucide="link" class="w-4 h-4"></i>
+                    <span>Genereer Link</span>
+                </button>
+            </div>
+        </form>
+    </div>
+
+    <!-- Actieve Gebruikers Tabel -->
+    <div class="bg-white dark:bg-[#111622] border border-slate-200 dark:border-slate-800/80 rounded-2xl p-6 sm:p-7 shadow-xs space-y-4 transition">
+        <div class="flex items-center justify-between pb-3 border-b border-slate-100 dark:border-slate-800">
+            <h3 class="text-sm font-bold text-slate-900 dark:text-white uppercase tracking-wider flex items-center space-x-2">
+                <i data-lucide="users" class="w-4 h-4 text-indigo-600 dark:text-indigo-400"></i>
+                <span>Geregistreerde Teamleden (<?= count($users) ?>)</span>
+            </h3>
+        </div>
+
+        <div class="overflow-x-auto">
+            <table class="w-full text-left text-xs text-slate-700 dark:text-slate-300">
+                <thead class="bg-slate-50 dark:bg-[#0c0f17] text-slate-500 dark:text-slate-400 uppercase text-[10px] tracking-wider border-b border-slate-200 dark:border-slate-800">
+                    <tr>
+                        <th class="p-3">Naam & E-mail</th>
+                        <th class="p-3">Rol</th>
+                        <th class="p-3">2FA Beveiliging</th>
+                        <th class="p-3">Lid sinds</th>
+                        <th class="p-3 text-right">Acties</th>
+                    </tr>
+                </thead>
+                <tbody class="divide-y divide-slate-100 dark:divide-slate-800/60">
+                    <?php foreach ($users as $u): ?>
+                        <tr class="hover:bg-slate-50 dark:hover:bg-slate-800/30 transition">
+                            <td class="p-3">
+                                <div class="font-bold text-slate-900 dark:text-white"><?= htmlspecialchars($u['name']) ?></div>
+                                <div class="text-[11px] text-slate-500 dark:text-slate-400 font-mono"><?= htmlspecialchars($u['email']) ?></div>
+                            </td>
+                            <td class="p-3">
+                                <span class="px-2 py-0.5 rounded text-[10px] font-bold <?= $u['role'] === 'ADMIN' ? 'bg-indigo-50 dark:bg-indigo-950/40 text-indigo-700 dark:text-indigo-300 border border-indigo-200 dark:border-indigo-800/60' : 'bg-slate-100 dark:bg-slate-800 text-slate-700 dark:text-slate-300' ?>">
+                                    <?= $u['role'] === 'ADMIN' ? 'Beheerder' : 'Collega' ?>
+                                </span>
+                            </td>
+                            <td class="p-3">
+                                <span class="px-2 py-0.5 rounded-full bg-teal-50 dark:bg-teal-950/30 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60 text-[10px] font-medium flex items-center space-x-1 w-max">
+                                    <i data-lucide="shield-check" class="w-3 h-3"></i>
+                                    <span>2FA Actief</span>
+                                </span>
+                            </td>
+                            <td class="p-3 text-slate-500 dark:text-slate-400">
+                                <?= date('d-m-Y', strtotime($u['created_at'])) ?>
+                            </td>
+                            <td class="p-3 text-right">
+                                <?php if ($u['id'] !== $adminUser['id']): ?>
+                                    <a href="/users.php?delete_user=<?= $u['id'] ?>" onclick="return confirm('Gebruiker verwijderen?')" class="text-slate-400 hover:text-red-600 dark:text-slate-500 dark:hover:text-red-400 transition p-1 cursor-pointer">
+                                        <i data-lucide="trash-2" class="w-4 h-4 inline"></i>
+                                    </a>
+                                <?php else: ?>
+                                    <span class="text-[10px] text-slate-400 dark:text-slate-600 font-medium">Uzelf</span>
+                                <?php endif; ?>
+                            </td>
+                        </tr>
+                    <?php endforeach; ?>
+                </tbody>
+            </table>
+        </div>
+    </div>
+
+    <!-- Uitstaande Uitnodigingen Tabel -->
+    <div class="bg-white dark:bg-[#111622] border border-slate-200 dark:border-slate-800/80 rounded-2xl p-6 sm:p-7 shadow-xs space-y-4 transition">
+        <div class="flex items-center justify-between pb-3 border-b border-slate-100 dark:border-slate-800">
+            <h3 class="text-sm font-bold text-slate-900 dark:text-white uppercase tracking-wider flex items-center space-x-2">
+                <i data-lucide="mail" class="w-4 h-4 text-amber-500"></i>
+                <span>Uitnodigingen Status (<?= count($invites) ?>)</span>
+            </h3>
+        </div>
+
+        <div class="overflow-x-auto">
+            <table class="w-full text-left text-xs text-slate-700 dark:text-slate-300">
+                <thead class="bg-slate-50 dark:bg-[#0c0f17] text-slate-500 dark:text-slate-400 uppercase text-[10px] tracking-wider border-b border-slate-200 dark:border-slate-800">
+                    <tr>
+                        <th class="p-3">Uitgenodigd E-mailadres</th>
+                        <th class="p-3">Rol</th>
+                        <th class="p-3">Status</th>
+                        <th class="p-3">Verloopt op</th>
+                        <th class="p-3 text-right">Actie</th>
+                    </tr>
+                </thead>
+                <tbody class="divide-y divide-slate-100 dark:divide-slate-800/60">
+                    <?php if (empty($invites)): ?>
+                        <tr><td colspan="5" class="p-4 text-center text-slate-400 dark:text-slate-500">Nog geen uitnodigingen verstuurd.</td></tr>
+                    <?php else: ?>
+                        <?php foreach ($invites as $inv): 
+                            $isUsed = !empty($inv['used_at']);
+                            $isExpired = strtotime($inv['expires_at']) < time();
+                        ?>
+                            <tr class="hover:bg-slate-50 dark:hover:bg-slate-800/30 transition">
+                                <td class="p-3 font-mono text-slate-900 dark:text-white"><?= htmlspecialchars($inv['email']) ?></td>
+                                <td class="p-3"><?= htmlspecialchars($inv['role']) ?></td>
+                                <td class="p-3">
+                                    <?php if ($isUsed): ?>
+                                        <span class="px-2 py-0.5 rounded text-[10px] font-bold bg-teal-50 dark:bg-teal-950/30 text-teal-700 dark:text-teal-400 border border-teal-200 dark:border-teal-800/60">Geaccepteerd</span>
+                                    <?php elseif ($isExpired): ?>
+                                        <span class="px-2 py-0.5 rounded text-[10px] font-bold bg-red-500/15 text-red-700 dark:text-red-400 border border-red-500/30">Verlopen</span>
+                                    <?php else: ?>
+                                        <span class="px-2 py-0.5 rounded text-[10px] font-bold bg-amber-500/15 text-amber-700 dark:text-amber-400 border border-amber-500/30">In afwachting</span>
+                                    <?php endif; ?>
+                                </td>
+                                <td class="p-3 text-slate-500 dark:text-slate-400"><?= date('d-m-Y H:i', strtotime($inv['expires_at'])) ?></td>
+                                <td class="p-3 text-right">
+                                    <a href="/users.php?delete_invite=<?= $inv['id'] ?>" onclick="return confirm('Uitnodiging intrekken?')" class="text-slate-400 hover:text-red-600 dark:text-slate-500 dark:hover:text-red-400 transition p-1 cursor-pointer">
+                                        <i data-lucide="trash-2" class="w-4 h-4 inline"></i>
+                                    </a>
+                                </td>
+                            </tr>
+                        <?php endforeach; ?>
+                    <?php endif; ?>
+                </tbody>
+            </table>
+        </div>
+    </div>
+</div>
+
+<script>
+function copyInviteLink() {
+    const input = document.getElementById('inviteLinkInput');
+    input.select();
+    navigator.clipboard.writeText(input.value);
+    document.getElementById('copyBtnText').innerText = 'Gekopieerd!';
+    setTimeout(() => {
+        document.getElementById('copyBtnText').innerText = 'Kopiëren';
+    }, 2000);
+}
+</script>
+
+<?php require_once __DIR__ . '/includes/footer.php'; ?>