<?php

namespace TwoFAS\TwoFAS\Authentication;

use Exception;
use TwoFAS\TwoFAS\Storage\Trusted_Devices_Storage;
use TwoFAS\TwoFAS\Http\JSON_Response;
use TwoFAS\TwoFAS\Http\Redirection_Response;
use TwoFAS\TwoFAS\Http\View_Response;
use WP_Error;
use WP_User;

/**
 * This class handles logging in on a trusted device.
 */
final class Trusted_Device_Login extends Login_Handler {

	/**
	 * @var Trusted_Devices_Storage
	 */
	private $trusted_devices_storage;

	/**
	 * @param Login_Support           $login_support
	 * @param Trusted_Devices_Storage $trusted_devices_storage
	 */
	public function __construct( Login_Support $login_support, Trusted_Devices_Storage $trusted_devices_storage ) {
		parent::__construct( $login_support );
		$this->trusted_devices_storage = $trusted_devices_storage;
	}

	/**
	 * @param null|WP_Error|WP_User $user
	 *
	 * @return bool
	 */
	public function supports( $user ) {
		if ( ! $this->is_wp_user( $user ) ) {
			return false;
		}

		return $this->trusted_devices_storage->is_device_trusted( $user->ID ) && ! $this->login_support->has_final_response();
	}

	/**
	 * @param null|WP_Error|WP_User $user
	 *
	 * @return bool|JSON_Response|Redirection_Response|View_Response
	 */
	protected function handle( $user ) {
		$this->trusted_devices_storage->set_trusted_device_login_time( $user->ID );

		try {
			$final_response = $this->json( array( 'user_id' => $this->get_user_id() ), 200 );
			$this->login_support->set_final_response( $final_response );
		} catch ( Exception $e ) {
			$this->capture_exception( $e );
		}

		return $this->fallback( $user );
	}
}