<?php

namespace TwoFAS\TwoFAS\Hooks;

use Exception;
use TwoFAS\TwoFAS\Authentication\Login_Process;
use TwoFAS\TwoFAS\Core\Plugin_Status;
use TwoFAS\TwoFAS\Exceptions\Handler\Error_Handler;
use TwoFAS\TwoFAS\Http\JSON_Response;
use TwoFAS\TwoFAS\Http\Redirection_Response;
use TwoFAS\TwoFAS\Http\View_Response;
use TwoFAS\TwoFAS\Templates\Twig;
use WP_Error;
use WP_User;

class Authenticate_Filter implements Hook_Interface {

	const TWOFAS_CODE_KEY            = 'twofas_code';
	const TWOFAS_REMEMBER_DEVICE_KEY = 'twofas_remember_device';
	const LOGIN_ACTION_KEY           = 'twofas_action';
	const PUSHER_SESSION_ID_KEY      = 'pusher_session_id';
	const SECRET_FIELD               = 'totp_secret';

	/**
	 * @var Login_Process
	 */
	private $login_process;

	/**
	 * @var Plugin_Status
	 */
	private $plugin_status;

	/**
	 * @var Error_Handler
	 */
	private $error_handler;

	/**
	 * @var Twig
	 */
	private $twig;

	/**
	 * @param Plugin_Status $plugin_status
	 * @param Login_Process $login_process
	 * @param Error_Handler $error_handler
	 * @param Twig          $twig
	 */
	public function __construct(
		Plugin_Status $plugin_status,
		Login_Process $login_process,
		Error_Handler $error_handler,
		Twig $twig
	) {
		$this->login_process = $login_process;
		$this->plugin_status = $plugin_status;
		$this->error_handler = $error_handler;
		$this->twig          = $twig;
	}

	public function register_hook() {
		if ( $this->plugin_status->client_completed_registration() && $this->plugin_status->is_plugin_enabled() ) {
			add_filter( 'authenticate', array( $this, 'authenticate' ), 100 );
		}
	}

	/**
	 * @param null|WP_User|WP_Error $user
	 *
	 * @return null|WP_User|WP_Error
	 */
	public function authenticate( $user ) {
		$response = $this->login_process->authenticate( $user );

		if ( $response instanceof JSON_Response ) {
			$status_code = $response->get_status_code();
			$body        = $response->get_body();

			if ( 200 === $status_code ) {
				return new WP_User( $body['user_id'] );
			}

			return $this->error( $body['error'] );
		} elseif ( $response instanceof Redirection_Response ) {
			$response->redirect();
		} elseif ( $response instanceof View_Response ) {
			try {
				echo $this->twig->try_render( $response->get_template(), $response->get_data() );
				exit;
			} catch ( Exception $e ) {
				return $this->error_handler->capture_exception( $e )->to_wp_error( $e );
			}
		} else {
			return $user;
		}
	}

	/**
	 * @param string $message
	 *
	 * @return WP_Error
	 */
	private function error( $message ) {
		return new WP_Error( 'twofas_login_error', $message );
	}
}