<?php

namespace TwoFAS\TwoFAS\Authentication;

use TwoFAS\TwoFAS\Exceptions\User_Not_Found_Exception;
use TwoFAS\TwoFAS\Http\JSON_Response;
use TwoFAS\TwoFAS\Http\Redirection_Response;
use TwoFAS\TwoFAS\Http\View_Response;
use TwoFAS\TwoFAS\Storage\Options_Storage;
use WP_Error;
use WP_User;

/**
 * This class checks whether user has 2FA enabled.
 */
final class Second_Factor_Status_Check extends Login_Handler {

	/**
	 * @var Options_Storage
	 */
	private $options_storage;

	/**
	 * @param Login_Support   $login_support
	 * @param Options_Storage $options_storage
	 */
	public function __construct( Login_Support $login_support, Options_Storage $options_storage ) {
		parent::__construct( $login_support );

		$this->options_storage = $options_storage;
	}

	/**
	 * @param null|WP_Error|WP_User $user
	 *
	 * @return bool
	 */
	public function supports( $user ) {
		if ( ! $this->is_wp_user( $user ) ) {
			return false;
		}

		try {
			$roles = $this->get_roles();
		} catch ( User_Not_Found_Exception $e ) {
			return false;
		}

		return ! $this->user_storage->is_2fa_enabled() && ! $this->options_storage->has_twofas_role( $roles );
	}

	/**
	 * @param null|WP_Error|WP_User $user
	 *
	 * @return bool|JSON_Response|Redirection_Response|View_Response
	 */
	protected function handle( $user ) {
		return $this->json( array( 'user_id' => $user->ID ), 200 );
	}
}