using Microsoft.AspNetCore.Authentication;

namespace Dpz.Core.Auth.Controllers;

public class ShellController(
    IUserPasskeySessionService passkeySessionService,
    IAccountSessionService accountSessionService
) : Controller
{
    [HttpGet("~/sign-in")]
    public IActionResult SignIn(string? returnUrl = null, string? msg = null)
    {
        if (User.Identity?.IsAuthenticated == true)
        {
            if (!string.IsNullOrWhiteSpace(returnUrl) && Url.IsLocalUrl(returnUrl))
            {
                return Redirect(returnUrl);
            }

            return RedirectToAction("Index", "Home");
        }

        return this.ShellView(
            new AuthShellViewModel<EmptyAuthShellPayload>
            {
                EntryName = "public",
                PageName = "sign-in",
                ReturnUrl = returnUrl,
                Message = msg,
            }
        );
    }

    [Authorize, Route("~/sign-out")]
    public async Task<IActionResult> Logout(string? returnUrl)
    {
        var account = User.NameIdentifier;
        var sessionId = User.SessionId;
        if (!string.IsNullOrWhiteSpace(account) && !string.IsNullOrWhiteSpace(sessionId))
        {
            await accountSessionService.RevokeAsync(account, sessionId);
        }
        passkeySessionService.ClearCurrentCredentialId();
        await HttpContext.SignOutAsync();
        return string.IsNullOrWhiteSpace(returnUrl) || !Url.IsLocalUrl(returnUrl)
            ? Redirect("/")
            : Redirect(returnUrl);
    }

    [Authorize, HttpGet, Route("change-password.html")]
    public IActionResult ChangePassword()
    {
        return UserShell("change-password");
    }

    [Authorize, HttpGet, Route("passkeys.html")]
    public IActionResult Passkeys()
    {
        return UserShell("passkeys");
    }

    [Authorize, HttpGet, Route("security-onboarding.html")]
    public IActionResult SecurityOnboarding(string? returnUrl = null)
    {
        returnUrl =
            string.IsNullOrWhiteSpace(returnUrl) || !Url.IsLocalUrl(returnUrl)
                ? Url.Action("Index", "Home") ?? "/"
                : returnUrl;

        return UserShell("security-onboarding", returnUrl);
    }

    [HttpGet("auth-status/{reason}")]
    public IActionResult AuthStatus(string reason)
    {
        return this.ShellView(
            new AuthShellViewModel<EmptyAuthShellPayload>
            {
                EntryName = "public",
                PageName = "auth-status",
                Message = reason,
            }
        );
    }

    private IActionResult UserShell(string pageName, string? returnUrl = null)
    {
        return this.ShellView(
            new AuthShellViewModel<EmptyAuthShellPayload>
            {
                EntryName = "identity",
                PageName = pageName,
                ReturnUrl = returnUrl,
                User = new VmUserInfo
                {
                    Id = User.NameIdentifier ?? "",
                    Name = User.Identity?.Name ?? "",
                    Avatar = "",
                    Sex = Sex.Other,
                    Permissions = null,
                    Enable = true,
                    Key = "",
                },
            }
        );
    }
}