<?php

/**
 * Copyright 2024-2025 Simply.IN Sp. z o.o.
 *
 * NOTICE OF LICENSE
 *
 * Licensed under the EUPL-1.2 or later.
 * You may not use this work except in compliance with the Licence.
 *
 * Copy of the Licence is available at:
 * https://joinup.ec.europa.eu/software/page/eupl
 * It is bundled with this package in the file LICENSE.txt
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the Licence is distributed on an as is basis,
 * without warranties or conditions of any kind, either express or implied.
 * Check the Licence for the specific language governing permissions
 * and limitations under the License.
 *
 * @author   Simply.IN Sp. z o.o.
 * @copyright 2024-2025 Simply.IN Sp. z o.o.
 * @license   https://joinup.ec.europa.eu/software/page/eupl
 */

if (!defined('_PS_VERSION_')) {
    exit;
}

class SimplyInOrder extends ObjectModel
{
    use SimplyInInstallSqlTrait;

    public $id;

    public $reference;

    public $simplyin_id;

    /**
     * The Simply.IN authorization this order was placed with, bound to the order rather than the
     * browser session: the pay-again surface on the order-confirmation page needs it to offer a
     * shopper's saved cards, and that page does not reliably run in the session the order was
     * placed in. No size limit, matching how the rest of this codebase stores an opaque backend
     * token whose format is not this plugin's to assume.
     */
    public $auth_token;

    public static $token = '';

    public static $definition = [
        'table' => 'simplyin_order',
        'primary' => 'id_simplyin_order',
        'multilang' => false,
        'multilang_shop' => false,
        'fields' => [
            'reference' => [
                'type' => self::TYPE_STRING,
                'size' => 36,
            ],
            'simplyin_id' => [
                'type' => self::TYPE_STRING,
                'size' => 36,
            ],
            'auth_token' => [
                'type' => self::TYPE_STRING,
            ],
        ],
    ];

    public static function getByReference($reference)
    {
        $id = Db::getInstance()->getValue('
            SELECT ' . self::$definition['primary'] . '
            FROM `' . _DB_PREFIX_ . self::$definition['table'] . '`
            WHERE reference = "' . pSql($reference) . '"');

        if ($id) {
            return new self((int) $id);
        }
        $object = new self();
        $object->reference = $reference;

        return $object;

    }

    public static function getByIdOrder($id_order)
    {
        $sql = '
            SELECT reference FROM `' . _DB_PREFIX_ . 'orders`
            WHERE id_order = ' . (int) $id_order;
        $reference = Db::getInstance()->getValue($sql);
        if ($reference) {
            return self::getByReference($reference);
        }

        return false;

    }

    /**
     * Per-request memo for {@see getAuthToken()}: one order-confirmation render reads this same,
     * request-immutable value once per payment provider on the page (methods lookup, the
     * diagnostic log, and once per rendered paywall block) - without this, that is several
     * SHOW-COLUMNS-free but still two-round-trip DB reads for one value that cannot change mid
     * request. Request-scoped only: PHP tears this down with everything else between requests.
     *
     * @var array<int, string>
     */
    private static $authTokenCache = [];

    /**
     * The authorization this order was placed with, or '' when there is none stored - an order this
     * plugin never touched, one whose authorization was never persisted, or one already cleared
     * because the order settled or closed. Never throws: a caller reads this to decide whether to
     * fall back to the anonymous paywall, and that decision must always have an answer.
     */
    public static function getAuthToken($id_order)
    {
        $id_order = (int) $id_order;
        if (array_key_exists($id_order, self::$authTokenCache)) {
            return self::$authTokenCache[$id_order];
        }

        $object = self::getByIdOrder($id_order);
        $token = $object instanceof self ? (string) $object->auth_token : '';
        self::$authTokenCache[$id_order] = $token;

        return $token;
    }
}
