/* Financer - Pocket Money Tracker
 * Copyright (C) 2025  Vidhu Kant Sharma <vidhukant@vidhukant.com>

 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.

 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.

 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

import { Request, Response } from "express";
import bcrypt from "bcrypt";

import { create, readByEmail, readById } from "../service/user";
import { getAccessToken, getRefreshToken, verifyRefreshToken } from "../util/auth";

const signup = async (req: Request, res: Response) => {
    bcrypt.hash(req.body.password, 10, async (err, hash) => {
        try {
            if (err != undefined) {
                res.status(500).json({ error: "Internal Server Error" });
                console.error(err);
            }

            const user = await create({
                ...req.body,
                "password": hash,
            });

            // @ts-ignore
            delete user["password"];
            // @ts-ignore
            delete user["refreshTokenVersion"]

            res.status(201).json({
                user: user,
                accessToken: getAccessToken(user.id),
                refreshToken: getRefreshToken(user.id, user.refreshTokenVersion)
            });
        } catch (error) {
            res.status(500).json({ error: "Internal Server Error" });
            console.error(error);
        }
    });
}

const login = async (req: Request, res: Response) => {
    try {
        const user = await readByEmail(req.body.email);

        bcrypt.compare(req.body.password, user.password, (err, isMatch) => {
            if (err != undefined) {
                res.status(500).json({ error: "Internal Server Error" });
                console.error(err);
            }

            if (isMatch) {
                // @ts-ignore
                delete user["password"];
                // @ts-ignore
                delete user["refreshTokenVersion"]

                res.status(200).json({
                    user: user,
                    accessToken: getAccessToken(user.id),
                    refreshToken: getRefreshToken(user.id, user.refreshTokenVersion)
                });
            } else {
                res.status(400).json({ error: "Invalid Credentials" });
            }
        })
    } catch (error) {
        res.status(500).json({ error: "Internal Server Error" });
        console.error(error);
    }
}

const refresh = async (req: Request, res: Response) => {
    try {
        const claims = verifyRefreshToken(req.body.refreshToken);
        const user = await readById(claims.userId);

        if (!user) {
            res.status(404).json({ error: "Not Found" })
        } else {
            // @ts-ignore
            if (claims.version == user.refreshTokenVersion) {
                // @ts-ignore
                res.status(200).json({ accessToken: getAccessToken(user.id), refreshToken: getRefreshToken(user.id, user.refreshTokenVersion) });
            } else {
                res.status(401).json({ error: "Session Expired" })
            }
        }
    } catch (error) {
        // @ts-ignore
        switch (error.message) {
            case "invalid signature":
                res.status(401).json({ error: "Invalid Credentials" });
                break;
            case "jwt expired":
                res.status(401).json({ error: "Token Expired" });
                break;
            default:
                res.status(500).json({ error: "Internal Server Error" });
                console.error(error);
        }
    }
}

export { login, signup, refresh };