# frozen_string_literal: true

module Decidim
  module ActionDelegator
    module Verifications
      module DelegationsVerifier
        class AuthorizationsController < ApplicationController
          include Decidim::FormFactory
          include Decidim::Verifications::Renewable

          helper_method :authorization, :setting

          before_action do
            unless setting
              flash[:alert] = t("verifications.delegations_verifier.not_active", scope: "decidim.action_delegator")
              redirect
            end
          end

          def new
            @authorization.destroy! if authorization&.persisted? && !authorization&.granted?

            enforce_permission_to :create, :authorization, authorization: authorization
            @form = form(DelegationsVerifierForm).instance(setting: setting)
            participant = @form&.participant

            return unless ActionDelegator.authorize_on_login && setting&.verify_with_email?

            Decidim::Verifications::PerformAuthorizationStep.call(authorization, @form) do
              on(:ok) do
                grant_and_redirect(participant)
              end
              on(:invalid) do
                render :new
              end
            end
          end

          def create
            enforce_permission_to :create, :authorization, authorization: authorization

            @form = form(DelegationsVerifierForm).from_params(params, setting: setting)
            participant = @form&.participant

            Decidim::Verifications::PerformAuthorizationStep.call(authorization, @form) do
              on(:ok) do
                if setting.phone_required?
                  flash[:notice] = t("authorizations.create.success", scope: "decidim.verifications.sms")
                  authorization_method = Decidim::Verifications::Adapter.from_element(authorization.name)
                  redirect_to authorization_method.resume_authorization_path(redirect_url: redirect_url)
                else
                  grant_and_redirect(participant)
                end
              end
              on(:invalid) do
                flash.now[:alert] = t("authorizations.create.error", scope: "decidim.verifications.sms")
                render :new
              end
            end
          end

          def edit
            enforce_permission_to :update, :authorization, authorization: authorization

            @form = form(Decidim::Verifications::Sms::ConfirmationForm).from_params(params)
          end

          def update
            enforce_permission_to :update, :authorization, authorization: authorization

            @form = form(Decidim::Verifications::Sms::ConfirmationForm).from_params(params)

            Decidim::Verifications::ConfirmUserAuthorization.call(authorization, @form, session) do
              on(:ok) do
                flash[:notice] = t("authorizations.update.success", scope: "decidim.verifications.sms")

                redirect
              end

              on(:invalid) do
                flash.now[:alert] = t("authorizations.update.error", scope: "decidim.verifications.sms")
                render :edit
              end
            end
          end

          def destroy
            enforce_permission_to :destroy, :authorization, authorization: authorization

            authorization.destroy!
            flash[:notice] = t("authorizations.destroy.success", scope: "decidim.verifications.sms")

            redirect_to action: :new
          end

          private

          def grant_and_redirect(participant)
            authorization.grant!
            participant.update!(decidim_user: authorization.user)
            flash[:notice] = t("authorizations.update.success", scope: "decidim.verifications.sms")
            redirect
          end

          def redirect
            if redirect_url
              redirect_to redirect_url
            else
              redirect_to decidim_verifications.authorizations_path
            end
          end

          def authorization
            @authorization ||= Decidim::Authorization.find_or_initialize_by(
              user: current_user,
              name: "delegations_verifier"
            )
          end

          def setting
            @setting ||= all_settings.first
          end

          def all_settings
            @all_settings ||= OrganizationSettings.new(current_user.organization).active
          end
        end
      end
    end
  end
end