<?php

namespace App\Modules\Identity\Http;

use App\Http\Controllers\Controller;
use App\Models\User;
use App\Modules\Identity\Application\AuthenticatedUserPayload;
use App\Modules\Identity\Domain\Enums\AccountStatus;
use App\Modules\Identity\Domain\Enums\UserRole;
use App\Modules\Identity\Http\Requests\LoginRequest;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Validation\ValidationException;

final class AuthController extends Controller
{
    public function __construct(private readonly AuthenticatedUserPayload $payload) {}

    public function login(LoginRequest $request): JsonResponse
    {
        $credentials = $request->validated();
        $user = User::query()->where('email', mb_strtolower($credentials['email']))->first();

        if (! $user || ! Hash::check($credentials['password'], $user->password)) {
            throw ValidationException::withMessages(['email' => ['The provided credentials are incorrect.']]);
        }

        if ($user->status === AccountStatus::Disabled) {
            return response()->json(['error' => ['code' => 'account_disabled', 'message' => 'This account is disabled.']], 403);
        }

        $user->loadMissing('organization');
        if ($user->role !== UserRole::SuperAdmin && (! $user->organization || $user->organization->status !== 'active')) {
            return response()->json(['error' => ['code' => 'organization_unavailable', 'message' => 'The organization is unavailable.']], 403);
        }

        $token = $user->createToken($credentials['device_name'] ?? 'web')->plainTextToken;

        return response()->json(['data' => [
            'token' => $token,
            'user' => $this->payload->make($user),
        ]]);
    }

    public function me(Request $request): JsonResponse
    {
        return response()->json(['data' => $this->payload->make($request->user())]);
    }

    public function logout(Request $request): JsonResponse
    {
        $request->user()->currentAccessToken()?->delete();

        return response()->json(['data' => ['loggedOut' => true]]);
    }
}