package user

import (
	"fmt"
	"strings"

	"git.golem15.com/golem15/sm-user-plugin/controllers"
	"git.golem15.com/golem15/summercms/modules/pact"
	"git.golem15.com/golem15/summercms/modules/surf"
)

func (p *Plugin) Routes(r pact.Router) error {
	guard, err := p.turnstileGuard()
	if err != nil {
		return err
	}
	r.Group("/_user/api/v1", surf.Use("throttle:user-api"), func(g pact.Router) {
		g.Post("/login", controllers.Login(p.app), guard...)
		g.Post("/logout", controllers.Logout(p.app))
		g.Get("/fetch", controllers.Fetch(p.app))
		g.Post("/refresh", controllers.Refresh(p.app))
		g.Post("/register", controllers.Register(p.app), guard...)
		g.Get("/oauth-providers", controllers.OAuthProviders(p.app))
		g.Post("/forgot-password", controllers.ForgotPassword(p.app))
		g.Post("/reset-password", controllers.ResetPassword(p.app))
		g.Post("/activate", controllers.Activate(p.app))
		g.Post("/activate-by-code", controllers.ActivateByCode(p.app))
		g.Post("/update", controllers.Update(p.app))
		g.Post("/change-password", controllers.ChangePassword(p.app))
		g.Post("/marketing-consent", controllers.MarketingConsent(p.app))
		g.Post("/avatar", controllers.UploadAvatar(p.app))
		g.Post("/avatar/remove", controllers.RemoveAvatar(p.app))
		g.Post("/tokens", controllers.APITokenStore(p.app), "jwt.auth")
		g.Get("/tokens", controllers.APITokenIndex(p.app), "jwt.auth")
		g.Delete("/tokens/{id}", controllers.APITokenDestroy(p.app), "jwt.auth")
		g.Where("id", "[0-9]+")
	})
	return nil
}

// turnstileGuard returns the middleware that golem15.user.turnstile adds to
// POST /login and /register. The key is opt-in: empty (the default) adds
// nothing, "open" and "closed" select the framework's turnstile:{mode}
// middleware (summercms v0.3.0 and later), and any other value is refused so
// a typo cannot silently leave the forms unprotected.
func (p *Plugin) turnstileGuard() ([]string, error) {
	if p.app == nil || p.app.Config == nil {
		return nil, nil
	}
	switch mode := strings.TrimSpace(p.app.Config.String("golem15.user.turnstile")); mode {
	case "":
		return nil, nil
	case "open", "closed":
		return []string{"turnstile:" + mode}, nil
	default:
		return nil, fmt.Errorf("golem15.user: golem15.user.turnstile must be empty, open or closed, got %q", mode)
	}
}