# frozen_string_literal: true
require 'proxes/controllers/component'
require 'proxes/models/user'
require 'proxes/policies/user_policy'
require 'proxes/models/identity'
require 'proxes/policies/identity_policy'

module ProxES
  class Users < Component
    set model_class: ProxES::User
    set track_actions: true

    # New
    get '/new' do
      authorize settings.model_class, :create

      locals = {
        title: heading(:new),
        entity: ProxES::User.new,
        identity: ProxES::Identity.new
      }
      haml :"#{view_location}/new", locals: locals, layout_opts: { locals: locals }
    end

    # Create
    post '/' do
      authorize settings.model_class, :create

      locals = { title: heading(:new) }

      user_params = permitted_attributes(User, :create)
      identity_params = permitted_attributes(Identity, :create)
      user_params['email'] = identity_params['username']
      roles = user_params.delete('role_id')

      user     = locals[:user]     = User.new(user_params)
      identity = locals[:identity] = Identity.new(identity_params)

      if identity.valid? && user.valid?
        DB.transaction(isolation: :serializable) do
          identity.save
          user.save
          user.add_identity identity
          if roles
            roles.each do |role_id|
              user.add_role(role_id) unless user.roles.map(&:id).include? role_id.to_i
            end
          end
          user.check_roles
        end

        log_action("#{dehumanized}_create".to_sym) if settings.track_actions
        respond_to do |format|
          format.html do
            flash[:success] = 'User created'
            redirect "/_proxes/users/#{user.id}"
          end
          format.json do
            headers 'Content-Type' => 'application/json'
            redirect "/_proxes/users/#{user.id}", 201
          end
        end
      else
        respond_to do |format|
          format.html do
            flash.now[:danger] = 'Could not create the user'
            locals[:entity] = user
            locals[:identity] = identity
            haml :"#{view_location}/new", locals: locals
          end
          format.json do
            headers \
              'Content-Type' => 'application/json',
              'Content-Location' => "#{view_location}/new"
            body ''
            status 402
          end
        end
      end
    end

    # Update
    put '/:id' do |id|
      entity = dataset[id.to_i]
      halt 404 unless entity
      authorize entity, :update

      values = permitted_attributes(settings.model_class, :update)
      roles  = values.delete('role_id')
      entity.set values
      if entity.valid? && entity.save
        entity.remove_all_roles
        roles.each { |role_id| entity.add_role(role_id) } if roles
        entity.check_roles
        log_action("#{dehumanized}_update".to_sym) if settings.track_actions
        flash[:success] = "#{heading} Updated"
        redirect "/_proxes/users/#{entity.id}"
      else
        haml :"#{view_location}/edit", locals: { entity: entity, title: heading(:edit) }
      end
    end

    put '/:id/identity' do |id|
      entity = dataset[id.to_i]
      halt 404 unless entity
      authorize entity, :update

      identity = entity.identity.first

      values = permitted_attributes(Identity, :create)
      identity.set values
      if identity.valid? && identity.save
        log_action("#{dehumanized}_update_password".to_sym) if settings.track_actions
        flash[:success] = "Password Updated"
        redirect '/_proxes/users/profile'
      else
        haml :"#{view_location}/profile", locals: { entity: entity, identity: identity, title: heading }
      end
    end

    # Delete
    delete '/:id' do |id|
      entity = dataset[id.to_i]
      halt 404 unless entity
      authorize entity, :delete

      entity.remove_all_identity
      entity.remove_all_roles
      entity.destroy

      log_action("#{dehumanized}_delete".to_sym) if settings.track_actions
      flash[:success] = "#{heading} Deleted"
      redirect '/_proxes/users'
    end

    # Profile
    get '/profile' do
      entity = current_user
      halt 404 unless entity
      authorize entity, :read

      haml :"#{view_location}/profile", locals: { entity: entity, identity: entity.identity.first, title: 'My Account' }
    end
  end
end