<?php

namespace TwoFAS\TwoFAS\Authentication;

use TwoFAS\TwoFAS\Storage\Trusted_Devices_Storage;
use TwoFAS\TwoFAS\Hooks\Authenticate_Filter;
use TwoFAS\TwoFAS\Http\JSON_Response;
use TwoFAS\TwoFAS\Http\Redirection_Response;
use TwoFAS\TwoFAS\Http\Request;
use TwoFAS\TwoFAS\Http\View_Response;
use WP_Error;
use WP_User;

/**
 * This class adds a new trusted device if a user checked a checkbox on a login page.
 */
final class New_Trusted_Device extends Login_Handler {

	/**
	 * @var Request
	 */
	private $request;

	/**
	 * @var Trusted_Devices_Storage
	 */
	private $trusted_devices_storage;

	/**
	 * @param Login_Support           $login_support
	 * @param Request                 $request
	 * @param Trusted_Devices_Storage $trusted_devices_storage
	 */
	public function __construct(
		Login_Support $login_support,
		Request $request,
		Trusted_Devices_Storage $trusted_devices_storage
	) {
		parent::__construct( $login_support);
		$this->request                 = $request;
		$this->trusted_devices_storage = $trusted_devices_storage;
	}

	/**
	 * @param null|WP_Error|WP_User $user
	 *
	 * @return bool
	 */
	public function supports( $user ) {
		if ( $this->is_wp_user( $user ) ) {
			return false;
		}

		$response = $this->login_support->get_final_response();

		if ( is_null( $response ) ) {
			return false;
		}

		$remember_device = $this->request->post( Authenticate_Filter::TWOFAS_REMEMBER_DEVICE_KEY );

		return 200 === $response->get_status_code()
			&& ! empty( $remember_device )
			&& $this->request->is_login_action_equal_to(Login_Action::VERIFY_TOTP_CODE);
	}

	/**
	 * @param null|WP_Error|WP_User $user
	 *
	 * @return bool|JSON_Response|Redirection_Response|View_Response
	 */
	protected function handle( $user ) {
		$response = $this->login_support->get_final_response();
		$body     = $response->get_body();
		$user_id  = $body['user_id'];

		$this->trusted_devices_storage->add_trusted_device( $user_id );

		return $this->fallback( $user );
	}
}