<?php
namespace JVBase\rest\routes;

use JVBase\rest\Rest;
use JVBase\rest\Route;
use WP_REST_Request;
use WP_REST_Response;
use Exception;

if (!defined('ABSPATH')) {
	exit;
}

class IntegrationsHelcimRoutes extends Rest
{
	public function registerRoutes(): void
	{
		Route::for('helcim/initialize-checkout')
			->post([$this, 'handleInitializeCheckout'])
			->auth('user')
			->rateLimit(5)
			->register();

		Route::for('helcim/invoices')
			->get([$this, 'getInvoices'])
			->auth('user')
			->rateLimit(10)
			->register();

		Route::for(Route::pattern('helcim/invoices/{invoice_id}'))
			->get([$this, 'getInvoice'])
			->auth('user')
			->rateLimit(10)
			->register();

		Route::for('helcim/saved-cards')
			->get([$this, 'getSavedCards'])
			->auth('user')
			->rateLimit(5)
			->register();

		Route::for('helcim/validate-transaction')
			->post([$this, 'validateTransaction'])
			->auth('user')
			->rateLimit(10)
			->register();
	}

	/**
	 * Initialize a HelcimPay.js checkout session.
	 *
	 * Returns checkoutToken for the frontend to call
	 * appendHelcimPayIframe(checkoutToken).
	 */
	public function handleInitializeCheckout(WP_REST_Request $request): WP_REST_Response
	{
		$data    = $request->get_json_params();
		$user_id = absint($data['user'] ?? get_current_user_id());

		if (empty($data['amount'])) {
			return $this->validationError(['message' => 'Amount is required']);
		}

		try {
			$helcim = JVB()->connect('helcim');

			// Auto-resolve customer ID from logged-in user
			if (empty($data['customerId']) && $user_id) {
				$data['customerId'] = $helcim->resolveCustomerId($user_id);
			}

			$result = $helcim->initializeCheckout($data);

			if (!$result['success']) {
				return $this->error($result['message'] ?? 'Checkout initialization failed');
			}

			return $this->success($result);

		} catch (Exception $e) {
			$this->logError('Helcim checkout init failed', ['error' => $e->getMessage()]);
			return $this->error($e->getMessage());
		}
	}

	/**
	 * Get invoices for the current user.
	 */
	public function getInvoices(WP_REST_Request $request): WP_REST_Response
	{
		$user_id = absint($request->get_param('user') ?? get_current_user_id());

		if (!$user_id) {
			return $this->validationError(['message' => 'Not logged in']);
		}

		try {
			$helcim    = JVB()->connect('helcim');
			$user      = get_userdata($user_id);
			$result    = $helcim->handleGetInvoices([
				'email' => $user->user_email,
			]);

			return $this->success($result);

		} catch (Exception $e) {
			return $this->error($e->getMessage());
		}
	}

	/**
	 * Get a single invoice by Helcim invoice ID.
	 */
	public function getInvoice(WP_REST_Request $request): WP_REST_Response
	{
		$invoiceId = $request->get_param('invoice_id');

		if (!$invoiceId) {
			return $this->validationError(['message' => 'Invoice ID required']);
		}

		try {
			$helcim = JVB()->connect('helcim');
			$result = $helcim->handleGetInvoice(['invoiceId' => $invoiceId]);

			return $this->success($result);

		} catch (Exception $e) {
			return $this->error($e->getMessage());
		}
	}

	/**
	 * Get saved cards for the current user.
	 */
	public function getSavedCards(WP_REST_Request $request): WP_REST_Response
	{
		$user_id = absint($request->get_param('user') ?? get_current_user_id());

		if (!$user_id) {
			return $this->validationError(['message' => 'Not logged in']);
		}

		try {
			$helcim = JVB()->connect('helcim');
			$result = $helcim->handleGetCustomerCards([
				'email' => get_userdata($user_id)->user_email,
			]);

			return $this->success($result);

		} catch (Exception $e) {
			return $this->error($e->getMessage());
		}
	}

	/**
	 * Validate a HelcimPay.js transaction server-side.
	 *
	 * Called after the frontend receives a SUCCESS message event.
	 * Verifies the transaction hash using the secretToken stored
	 * in the user's session/transient.
	 */
	public function validateTransaction(WP_REST_Request $request): WP_REST_Response
	{
		$data = $request->get_json_params();

		if (empty($data['secretToken']) || empty($data['transactionData'])) {
			return $this->validationError(['message' => 'Missing secretToken or transactionData']);
		}

		try {
			$helcim = JVB()->connect('helcim');
			$valid  = $helcim->validateTransaction(
				$data['secretToken'],
				$data['transactionData']
			);

			return $this->success([
				'valid' => $valid,
			]);

		} catch (Exception $e) {
			return $this->error($e->getMessage());
		}
	}
}