# frozen_string_literal: true

module Spree
  module Api
    class OauthsController < BaseController
      skip_before_action :authenticate_user

      def token
        result = catch(:warden) do
          try_authenticate_user
        end

        case result
        when Spree::User
          render json: token_response_json(result)
        when Hash
          render status: :unauthorized, json: { error: I18n.t(result[:message], scope: 'devise.failure') }
        else
          render status: :unauthorized, json: { error: I18n.t(:invalid_credentials, scope: 'solidus_jwt') }
        end
      end

      private

      def token_response_json(user)
        expires_in = SolidusJwt::Config.jwt_expiration

        {
          token_type: 'bearer',
          access_token: user.generate_jwt(expires_in: expires_in),
          expires_in: expires_in,
          refresh_token: generate_refresh_token_for(user)
        }
      end

      def try_authenticate_user
        warden.authenticate(:solidus_jwt_password) ||
          warden.authenticate(:solidus_jwt_refresh_token)
      end

      def generate_refresh_token_for(user)
        token_resource = user.auth_tokens.create!
        token_resource.token
      end
    end
  end
end