using Dpz.Core.Auth.Models.AdminApi;
using Dpz.Core.Service.Mediator.Features.Auth.Commands;
using Dpz.Core.Service.Mediator.Features.Auth.Contracts;
using Dpz.Core.Service.Mediator.Features.Auth.Queries;

namespace Dpz.Core.Auth.Controllers;

[ApiController]
[Route("api/admin/grants")]
[Authorize(nameof(Permissions.System))]
public class GrantController(IMediator mediator) : ControllerBase
{
    [HttpGet]
    public async Task<ResponseResult<PagedListWarp<AuthAllowedClientItem>>> Page(
        string? account = null,
        string? appId = null,
        int page = 1,
        int limit = 20,
        CancellationToken cancellationToken = default
    )
    {
        var result = await mediator.Send(
            new SearchAllowedClientsQuery
            {
                Account = account,
                AppId = appId,
                Page = page,
                Limit = limit,
            },
            cancellationToken
        );

        return ResponseResult<PagedListWarp<AuthAllowedClientItem>>.Ok(result);
    }

    [HttpPost]
    public async Task<ResponseResult> Grant(
        GrantAllowedClientRequest request,
        CancellationToken cancellationToken
    )
    {
        var result = await mediator.Send(
            new GrantApplicationAccessCommand { Account = request.Account, AppId = request.AppId },
            cancellationToken
        );

        return result;
    }

    [HttpDelete("{id}")]
    public async Task<ResponseResult> Revoke(string id, CancellationToken cancellationToken)
    {
        var result = await mediator.Send(
            new RevokeAllowedClientCommand { Id = id },
            cancellationToken
        );
        return result;
    }
}