<?php

/**
 * Copyright 2024-2025 Simply.IN Sp. z o.o.
 *
 * NOTICE OF LICENSE
 *
 * Licensed under the EUPL-1.2 or later.
 * You may not use this work except in compliance with the Licence.
 *
 * Copy of the Licence is available at:
 * https://joinup.ec.europa.eu/software/page/eupl
 * It is bundled with this package in the file LICENSE.txt
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the Licence is distributed on an as is basis,
 * without warranties or conditions of any kind, either express or implied.
 * Check the Licence for the specific language governing permissions
 * and limitations under the License.
 *
 * @author   Simply.IN Sp. z o.o.
 * @copyright 2024-2025 Simply.IN Sp. z o.o.
 * @license   https://joinup.ec.europa.eu/software/page/eupl
 */

declare(strict_types=1);

namespace SimplyIn\Ajax\Handler;

use PrestaShopLogger;
use SimplyIn\Ajax\AjaxActionInterface;
use SimplyIn\Ajax\AjaxRequest;
use SimplyIn\Ajax\Service\CustomerService;
use SimplyIn\Ajax\Service\DeliveryFormRenderer;
use SimplyIn\Api\SimplyInApiClient;
use SimplyIn\Session\SimplyInSessionInterface;
use Throwable;

if (!defined('_PS_VERSION_')) {
    exit;
}

final class CheckPushNotificationHandler implements AjaxActionInterface
{
    public function __construct(
        private readonly SimplyInApiClient $api,
        private readonly SimplyInSessionInterface $session,
        private readonly CustomerService $customerService,
        private readonly DeliveryFormRenderer $renderer,
    ) {
    }

    public function name(): string
    {
        return 'checkPushNotification';
    }

    public function execute(AjaxRequest $request): array
    {
        $email = (string) $this->session->get('simplyin_email', '');
        $notificationTokenId = (string) $this->session->get('simplyin_notifiaction_token_id', '');

        $raw = $this->api->apiCall([
            'email' => $email,
            'notificationTokenId' => $notificationTokenId,
        ], 'POST', 'checkout/checkIfSubmitEmailPushNotificationWasConfirmedCommerce');
        $response = is_array($raw) ? $raw : [];

        if (empty($response['ok'])) {
            return $response;
        }

        // Only persist tokens the backend actually returned — writing '' when a key is absent would
        // clobber a still-valid session. Strip ok/rejected/request AND the tokens from the returned
        // payload so the tokens never reach the browser.
        if (isset($response['authToken'])) {
            $this->session->set('simplyin_auth_token', (string) $response['authToken']);
        }
        if (isset($response['refreshToken'])) {
            $this->session->set('simplyin_refresh_token', (string) $response['refreshToken']);
        }
        unset($response['ok'], $response['rejected'], $response['request'], $response['authToken'], $response['refreshToken']);

        // Twin of CheckCodeHandler: the backend already confirmed the push sign-in, so a
        // throw in the post-confirmation side effects (customer login/create, delivery-form render)
        // must not bubble out as a generic controller error that leaves the polling widget silent.
        // Surface it as an explicit failure the front reacts to (stop polling, request a new code).
        try {
            $response['login_result'] = $this->customerService->loginOrCreateByEmail($email, $response);
            $response['html'] = $this->renderer->render($response);
            $response['success'] = true;
        } catch (Throwable $e) {
            PrestaShopLogger::addLog(
                'SimplyIn checkPushNotification post-confirmation failure: ' . $e->getMessage()
                . ' @ ' . $e->getFile() . ':' . $e->getLine() . "\n" . $e->getTraceAsString(),
                3,
            );
            $response['success'] = false;
            $response['error'] = 'POST_VALIDATION_FAILURE';
        }

        return $response;
    }
}
