using PostFundManagement.Application.Abstractions.Services;
using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;
using PostFundManagement.Domain.Errors;
using PostFundManagement.Domain.Extensions;

namespace PostFundManagement.Api.Endpoints.Users;

[ApiVersionTarget(1)]
public sealed class SetUserLockoutEndpoint : IEndpoint
{
    public void Map(IEndpointRouteBuilder builder)
    {
        builder.MapPut("api/users/{userId:Guid}/session/lockout/{disable:bool}", async (Guid userId, bool disable, HttpContext context,
            IUserService service, CancellationToken cancellationToken = default) =>
        {
            var (_, role) = context.User.GetUserRole();
            if (role != null && role.Equals("Partner", StringComparison.OrdinalIgnoreCase))
                return Results.Forbid();

            return await service.SetUserLockoutAsync(userId, context.GetUserId(), disable, cancellationToken) switch
            {
                {  IsSuccess: true } => Results.Ok(),
                var r when r.HasError<NotFoundError>() => Results.NotFound(r.Errors.ToProblems()),
                var r when r.HasError<UpdateError>() => Results.BadRequest(r.Errors.ToProblems()),
                var r => Results.InternalServerError(r.Errors.ToProblems())
            };
        })
        .WithDescription("Lock user session")
        .RequireAuthorization(Constants.MainScope)
        .WithName(typeof(SetUserLockoutEndpoint).ToEndpointName())
        .MapToApiVersion(new ApiVersion(1))
        .Produces(StatusCodes.Status200OK)
        .Produces(StatusCodes.Status401Unauthorized)
        .Produces(StatusCodes.Status403Forbidden)
        .Produces<Problems>(StatusCodes.Status404NotFound)
        .Produces<Problems>(StatusCodes.Status400BadRequest)
        .Produces<Problems>(StatusCodes.Status500InternalServerError)
        .WithTags(EndpointTags.Users);
    }
}