package v1

import (
	"go-cook/api/models"
	"go-cook/api/repositories"
	"net/http"
	"time"

	"github.com/golang-jwt/jwt/v5"
	"github.com/labstack/echo/v4"
)

type JwtToken struct {
	Exp        time.Time `json:"exp"`
	Authorized bool      `json:"authorized"`
	UserName   string    `json:"username"`
	Token      string    `json:"token"`
	jwt.RegisteredClaims
}

func generateJwt() (string, error) {
	//TODO use env here
	secret := []byte("ThisIsABadSecretDontReallyUseThis")

	token := jwt.New(jwt.SigningMethodEdDSA)
	claims := token.Claims.(jwt.MapClaims)
	claims["exp"] = time.Now().Add(10 * time.Minute)
	claims["authorized"] = true
	claims["username"] = "someone"

	tokenString, err := token.SignedString(secret)
	if err != nil {
		return "", err
	}

	return tokenString, nil
}

func (h *Handler) AuthRegister(c echo.Context) error {
	username := c.QueryParam("username")
	_, err := h.userRepo.GetByName(username)
	if err != nil {
		// if we have an err, validate that if its not user not found.
		// if the user is not found, we can use that name
		if err.Error() != repositories.ErrUserNotFound {
			return c.JSON(http.StatusInternalServerError, models.ErrorResponse{
				HttpCode: http.StatusInternalServerError,
				Message: err.Error(),
			})	
		}
	}

	password := c.QueryParam("password")
	err = h.UserService.CheckPasswordForRequirements(password)
	if err != nil {
		return c.JSON(http.StatusInternalServerError, models.ErrorResponse{
			HttpCode: http.StatusInternalServerError,
			Message: err.Error(),
		})
	}

	_, err = h.userRepo.Create(username, password)
	if err != nil {
		return c.JSON(http.StatusInternalServerError, models.ErrorResponse{
			HttpCode: http.StatusInternalServerError,
			Message: err.Error(),
		})
	}

	return nil
}

func (h *Handler) AuthLogin(c echo.Context) error {
	username := c.QueryParam("username")
	password := c.QueryParam("password")
	
	// check if the user exists
	err := h.UserService.DoesUserExist(username)
	if err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	// make sure the hash matches
	err = h.UserService.DoesPasswordMatchHash(username, password)
	if err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	token, err := generateJwt()
	if err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	return c.JSON(http.StatusOK, token)
}

func (h *Handler) RefreshJwtToken(c echo.Context) error {
	return nil
}