using PostFundManagement.Application.Extensions;
using PostFundManagement.Domain.Abstractions;

namespace PostFundManagement.Application.Filters;

public sealed class UserRoleFilter(ITenantContextService tenantContext) : IEndpointFilter
{
    public async ValueTask<object?> InvokeAsync(EndpointFilterInvocationContext context, EndpointFilterDelegate next)
    {
        var principal = context.HttpContext.User;

        var (roleDecoded, role) = principal.GetUserRole();

        if (!roleDecoded)
            return Results.Json(new { message = "Invalid/missing user role in token." }, statusCode: StatusCodes.Status401Unauthorized);

        context.HttpContext.Items[UserRoleItemKey] = role;

        if (role.Equals("Partner", StringComparison.InvariantCultureIgnoreCase))
            tenantContext.ByPassTenantQueryFilter = true;

        return await next(context);
    }
}