import type {
    BUN_SQLITE_WGUI_SSO_LOGIN_CODES,
    BUN_SQLITE_WGUI_USERS,
    BunSQLiteTables,
} from "@/db/types/db";
import { AppData } from "@/src/data/app-data";
import loginUser from "@/src/functions/backend/auth/login-user";
import type { ApiReqParams, SSOAuth } from "@/src/types";
import { getCookie } from "@/src/utils/cookies";
import { decrypt } from "@/src/utils/crypt";
import EJSON from "@/src/utils/ejson";
import BunSQLite from "@moduletrace/bun-sqlite";
import type {
    APIResponseObject,
    BunextAPIRouteHandler,
} from "@moduletrace/bunext/types";

export const handler: BunextAPIRouteHandler<APIResponseObject> = async ({
    req,
    body,
}) => {
    try {
        const { sso_code } = body as ApiReqParams;

        const sso_cookie = getCookie(req, AppData["SSOAuthCookieName"]);

        if (!sso_cookie) {
            throw new Error(`No SSO session found!`);
        }

        if (!sso_code) {
            throw new Error(`No SSO code sent!`);
        }

        const decrypted_sso_json = await decrypt(sso_cookie);
        const decrypted_sso_object = EJSON.parse(decrypted_sso_json) as SSOAuth;

        const target_sso = (
            await BunSQLite.select<
                BUN_SQLITE_WGUI_SSO_LOGIN_CODES,
                (typeof BunSQLiteTables)[number]
            >({
                table: "sso_login_codes",
                query: {
                    query: {
                        code: {
                            value: sso_code,
                        },
                    },
                },
            })
        ).singleRes;

        if (!target_sso?.code) {
            throw new Error(`Invalid Code!`);
        }

        const now = Date.now();
        const time_elapsed = now - Number(target_sso.updated_at);
        const expirty_time = AppData["SSOCodeExpiryMinutes"] * 60 * 1000;

        if (time_elapsed > expirty_time) {
            throw new Error(`Code Expired. Please Login again.`);
        }

        const target_user = (
            await BunSQLite.select<
                BUN_SQLITE_WGUI_USERS,
                (typeof BunSQLiteTables)[number]
            >({
                table: "users",
                query: {
                    query: {
                        email: decrypted_sso_object.email
                            ? { value: decrypted_sso_object.email }
                            : undefined,
                    },
                },
            })
        ).singleRes;

        if (!target_user?.id) {
            throw new Error(`This device wasn't used to get this SSO code`);
        }

        return await loginUser({
            user_id: target_user.id,
        });
    } catch (error: any) {
        return {
            success: false,
            msg: error.message,
        };
    }
};