@PreAuthorize("hasRole('ADMIN')")
@GetMapping("/users")
public List<UserDto> getAllUsers() {
    return userService.getAllUsers();
}

@PreAuthorize("hasAnyRole('AGENT', 'ADMIN')")
@GetMapping("/analytics")
public AnalyticsDto getAnalytics() {
    return analyticsService.getAnalytics();
}

@Entity
public class User {
    
    @Id
    private Long id;
    
    // Открытые данные
    private String email;
    
    // Зашифрованные поля
    @Convert(converter = EncryptedStringConverter.class)
    private String passportNumber;
    
    @Convert(converter = EncryptedStringConverter.class)
    private String phoneNumber;
}

@Entity
public class PaymentMethod {
    @Id
    private Long id;
    
    private String tokenizedCardNumber;  // "tok_1234567890"
    private String lastFourDigits;        // "4242"
    private String cardBrand;             // "VISA"
    
    // НЕТ полного номера карты!
}

@Slf4j
public class UserService {
    
    public void processPayment(PaymentRequest request) {
        // ❌ ПЛОХО
        log.info("Processing payment for card: {}", request.getCardNumber());
        
        // ✅ ХОРОШО
        log.info("Processing payment for card ending in: {}", 
            maskCardNumber(request.getCardNumber()));
    }
    
    private String maskCardNumber(String cardNumber) {
        return "**** **** **** " + cardNumber.substring(cardNumber.length() - 4);
    }
}

@Entity
public class UserConsent {
    @Id
    private Long id;
    
    @ManyToOne
    private User user;
    
    private ConsentType type;  // PERSONAL_DATA, MARKETING, etc.
    private boolean granted;
    private LocalDateTime grantedAt;
    private String ipAddress;
}

@GetMapping("/me/export")
public ResponseEntity<byte[]> exportMyData() {
    User user = getCurrentUser();
    PersonalDataExport export = dataExportService.exportUserData(user);
    return ResponseEntity.ok()
        .header("Content-Disposition", "attachment; filename=my-data.json")
        .body(export.toJson());
}

@DeleteMapping("/me")
public ResponseEntity<Void> deleteMyAccount() {
    User user = getCurrentUser();
    
    // Анонимизация вместо удаления (для сохранения целостности)
    userService.anonymizeUser(user);
    
    return ResponseEntity.noContent().build();
}

public void anonymizeUser(User user) {
    user.setEmail("deleted-" + user.getId() + "@anonymized.com");
    user.setFirstName("DELETED");
    user.setLastName("USER");
    user.setPhoneNumber(null);
    user.setPassportNumber(null);
    user.setDeleted(true);
    user.setDeletedAt(LocalDateTime.now());
}

@Entity
public class AuditLog {
    @Id
    private Long id;
    
    private Long userId;
    private String action;  // "READ", "UPDATE", "DELETE"
    private String entity;  // "USER", "BOOKING"
    private String details;
    private String ipAddress;
    private LocalDateTime timestamp;
}

public PaymentToken tokenizeCard(CardDetails card) {
    // Отправка в payment gateway
    TokenResponse response = paymentGateway.tokenize(card);
    
    // Сохраняем только токен
    PaymentMethod method = new PaymentMethod();
    method.setToken(response.getToken());
    method.setLastFourDigits(card.getNumber().substring(12));
    method.setCardBrand(detectCardBrand(card.getNumber()));
    
    return paymentMethodRepository.save(method);
}

@PreAuthorize("hasRole('PAYMENT_ADMIN')")
@GetMapping("/payments/sensitive")
public List<PaymentDto> getSensitivePaymentData() {
    // Только специальные администраторы
}

@Aspect
@Component
public class PaymentAuditAspect {
    
    @After("@annotation(AuditPayment)")
    public void auditPayment(JoinPoint joinPoint) {
        // Log payment operation
        auditService.logPaymentOperation(
            joinPoint.getSignature().getName(),
            joinPoint.getArgs()
        );
    }
}

// ✅ Всегда проверяем ownership
@GetMapping("/bookings/{id}")
public BookingDto getBooking(@PathVariable Long id) {
    Booking booking = bookingService.findById(id);
    
    if (!booking.getUserId().equals(getCurrentUserId())) {
        throw new AccessDeniedException("Not your booking");
    }
    
    return bookingMapper.toDto(booking);
}

// ✅ Используем современные алгоритмы
@Bean
public PasswordEncoder passwordEncoder() {
    return new BCryptPasswordEncoder(12);  // Strong cost factor
}

// ✅ Используем PreparedStatement / JPA
@Query("SELECT u FROM User u WHERE u.email = :email")
User findByEmail(@Param("email") String email);

// ❌ НИКОГДА не делайте так
// String sql = "SELECT * FROM users WHERE email = '" + email + "'";

// ✅ Spring автоматически экранирует
@GetMapping("/users/{id}")
public String getUserProfile(@PathVariable Long id, Model model) {
    User user = userService.findById(id);
    model.addAttribute("user", user);
    return "user-profile";  // Thymeleaf автоматически экранирует
}

@Configuration
public class CorsConfig {
    
    @Bean
    public CorsConfigurationSource corsConfigurationSource() {
        CorsConfiguration config = new CorsConfiguration();
        config.setAllowedOrigins(List.of("https://app.travelmaster.com"));
        config.setAllowedMethods(List.of("GET", "POST", "PUT", "DELETE"));
        config.setAllowedHeaders(List.of("*"));
        config.setAllowCredentials(true);
        
        UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
        source.registerCorsConfiguration("/**", config);
        return source;
    }
}

@Configuration
@EnableWebSecurity
public class SecurityConfig {
    
    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http
            .csrf()
                .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
                .and()
            .authorizeHttpRequests()
                .anyRequest().authenticated();
        
        return http.build();
    }
}