<?php

require_once __DIR__ . '/../Services/SMSConfirmationService.php';

use Firebase\JWT\JWT;
use Firebase\JWT\Key;

class LoginController {
    private $SMSConfirmationService;
    public function __construct() {
        $this->SMSConfirmationService = new SMSConfirmationService();
    }
    public function loginUser($username, $password) {
        return ($username === 'admin' && $password === 'password');
    }

    public function logoutUser() {}

    public function authenticate() {
        $headers = getallheaders();

        if (!isset($headers['Authorization'])) {
            http_response_code(401);
            echo json_encode(['error' => 'Unauthorized']);
            exit;
        }

        $authHeader = $headers['Authorization'];
        list($token) = sscanf($authHeader, 'Bearer %s');

        if (!$token) {
            http_response_code(401);
            echo json_encode(['error' => 'Token was not provided']);
            exit;
        }

        try {
            $decoded = $this->validateJWT($token);
            if (!$decoded) {
                http_response_code(401);
                echo json_encode(['error' => 'Token was not decoded']);
                exit;
            }
            return $decoded;
        } catch (Exception $e) {
            http_response_code(401);
            echo json_encode(['error' => 'Invalid token', 'message' => $e->getMessage()]);
            exit;
        }
    }

    public function requestCode($data) {
        return $this->SMSConfirmationService->request_code($data);
    }

    public function confirmCode($data) {
        $confirmation_result = $this->SMSConfirmationService->confirm_code($data);

        if ($confirmation_result['success']) {
            $token = $this->generateJWT($confirmation_result['user_id'], $confirmation_result['phone']);
            $confirmation_result['token'] = $token;
        }
        return $confirmation_result;
    }

    public function checkToken($data) {
        $token = $data['token'];
        $decoded = $this->validateJWT($token);
        if (!$decoded) {
            http_response_code(401);
            echo json_encode(['error' => 'Invalid token']);
            exit;
        }
        return [
            'success' => true,
            'data' => [
                'userId' => $decoded['userId'],
                'phone' => $decoded['phone']
            ]
        ];
    }

    private function generateJWT($userId, $phone) {
        $secretKey = $_ENV['JWT_SECRET'];
        $issuedAt = time();
        $expirationTime = $issuedAt + 3600 * 8;
        $payload = [
            'iat' => $issuedAt,
            'exp' => $expirationTime,
            'userId' => $userId,
            'phone' => $phone
        ];
    
        return JWT::encode($payload, $secretKey, 'HS256');
    }

    private function validateJWT($token) {
        $secretKey = $_ENV['JWT_SECRET'];
    
        try {
            $decoded = JWT::decode($token, new Key($secretKey, 'HS256'));
            return (array) $decoded;
        } catch (Exception $e) {
            return null;
        }
    }
}