const std = @import("std");
const httpz = @import("httpz");
const model = @import("../Models/User.zig");
const db = @import("../Database/Connection.zig");
const errDesc = @import("ErrorDescription.zig");
const Handler = @import("../Handler.zig");
const Tokens = @import("../Authentication/Tokens.zig");

pub fn RegisterEndpoints(router: *httpz.Router(*Handler.Handler,*const fn (*Handler.RequestData, *httpz.request.Request, *httpz.response.Response) anyerror!void)) void {
    router.get("/auth", getUser, .{});
    router.post("/auth/register", register, .{});
    router.post("/auth/login", login, .{});
}

fn getUser(data: *Handler.RequestData, _: *httpz.Request, res: *httpz.Response) !void { 
    if (data.User == null) {
        try res.json(.{.status = "Unauthnticated"}, .{});
        return;
    }
    try res.json(.{ 
        .Username = data.User.?.Username,
        .Role = data.User.?.Role,
    }, .{});
}

const authResult = struct {
    Token: []const u8,
    User: struct {
        Username: []const u8,
        Role: []const u8
    },
};

fn register(_: *Handler.RequestData, req: *httpz.Request, res: *httpz.Response) !void {
    var body = try req.json(model.RequestBody) orelse {
        res.setStatus(.bad_request);
        return;
    };

    var body_model = try body.ToModel(req.arena);

    db.Users.Create(&body_model) catch |err| {
        if (err == db.ResultErrors.AlreadyExists) {
            res.setStatus(.bad_request);
            try res.json(errDesc.AlreadyExistsDescriptor, .{});
            return;
        }
        res.setStatus(.internal_server_error);
        return;
    };

    const loginResult = loginAction(req.arena, body) catch |err| {
        if (err == db.ResultErrors.NotFound) {
            res.setStatus(.unauthorized);
            try res.json(errDesc.ErrorDescriptor {
                .Message = "Login or password is incorrect"
            }, .{});
            return;
        }
        return err;
    };

    try res.json(loginResult, .{});
    res.setStatus(.created);
}

fn login(_: *Handler.RequestData, req: *httpz.Request, res: *httpz.Response) !void {
    const body = try req.json(model.RequestBody) orelse {
        res.setStatus(.bad_request);
        return;
    };

    const username = body.Username;
    const pwd = body.Password;

    const user = db.Users.GetByCredentials(req.arena, username, pwd) catch |err| {
        if (err == db.ResultErrors.NotFound) {
            res.setStatus(.unauthorized);
            try res.json(errDesc.ErrorDescriptor {
                .Message = "Login or password is incorrect"
            }, .{});
            return;
        }
        return err;
    };

    const token = try Tokens.GenerateNewSession(res.arena, user);
    try res.json(.{ 
        .Token = token,
        .User = .{
            .Username = user.Username,
            .Role = user.Role.ToString(),
        },
    } , .{});
}

/// Logs in with the given credentials
fn loginAction(allocator: std.mem.Allocator, requetsed: model.RequestBody) !authResult {
    const username = requetsed.Username;
    const pwd = requetsed.Password;
    const user = try db.Users.GetByCredentials(allocator, username, pwd); // catch |err| {
        // if (err == db.ResultErrors.NotFound) {
            // res.setStatus(.unauthorized);
            // try res.json(errDesc.ErrorDescriptor {
                // .Message = "Login or password is incorrect"
            // }, .{});
            // return;
        // }
        // return err;
    // };

    const token = try Tokens.GenerateNewSession(allocator, user);

    return authResult {
        .Token = token,
        .User = .{
            .Username = user.Username,
            .Role = user.Role.ToString(),
        }
    };
    // try res.json(.{ 
        // .Token = token,
        // .User = .{
            // .Username = user.Username,
            // .Role = user.Role.ToString(),
        // },
    // } , .{});
}