<?php

namespace App\Http\Controllers;

use App\Models\CustomerProfile;
use App\Models\User;
use App\Services\Tenant\TenantContext;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\DB;
use Illuminate\Support\Facades\Hash;
use Illuminate\View\View;

class AuthController extends Controller
{
    public function showLogin(TenantContext $tenant): View
    {
        return view('auth.sign-in', ['business' => $tenant->require()]);
    }

    public function showWelcome(TenantContext $tenant): View
    {
        return view('auth.welcome', ['business' => $tenant->require()]);
    }

    public function showVerify(TenantContext $tenant): View
    {
        return view('auth.verify', ['business' => $tenant->require()]);
    }

    public function login(Request $request): RedirectResponse
    {
        $credentials = $request->validate([
            'email' => ['required', 'email', 'max:190'],
            'password' => ['required', 'string'],
        ]);

        if (! Auth::attempt($credentials, $request->boolean('remember'))) {
            return back()->withErrors(['email' => 'Those details do not match our records.'])->onlyInput('email');
        }

        $request->session()->regenerate();

        return redirect()->intended(route('customer.dashboard'));
    }

    public function showRegister(TenantContext $tenant): View
    {
        return view('auth.register', ['business' => $tenant->require()]);
    }

    public function showForgot(TenantContext $tenant): View
    {
        return view('auth.forgot-password', ['business' => $tenant->require()]);
    }

    public function forgot(Request $request): RedirectResponse
    {
        $request->validate(['email' => ['required', 'email']]);
        return back()->with('status', 'If an account exists for that email, reset instructions will be sent shortly.');
    }

    public function register(Request $request, TenantContext $tenant): RedirectResponse
    {
        $validated = $request->validate([
            'firstName' => ['required', 'string', 'max:80'],
            'lastName' => ['required', 'string', 'max:80'],
            'email' => ['required', 'email', 'max:190', 'unique:User,email'],
            'phone' => ['nullable', 'string', 'max:40'],
            'password' => ['required', 'string', 'min:8', 'confirmed'],
        ]);

        $user = DB::transaction(function () use ($validated, $tenant): User {
            $user = User::create([
                'name' => trim($validated['firstName'].' '.$validated['lastName']),
                'email' => strtolower(trim($validated['email'])),
                'phone' => $validated['phone'] ?? null,
                'passwordHash' => Hash::make($validated['password']),
            ]);

            CustomerProfile::create([
                'businessId' => $tenant->require()->id,
                'userId' => $user->id,
                'firstName' => trim($validated['firstName']),
                'lastName' => trim($validated['lastName']),
                'email' => strtolower(trim($validated['email'])),
                'phone' => $validated['phone'] ?? null,
                'isGuest' => false,
            ]);

            return $user;
        });

        Auth::login($user);
        $request->session()->regenerate();

        return redirect()->route('customer.dashboard');
    }

    public function logout(Request $request): RedirectResponse
    {
        Auth::logout();
        $request->session()->invalidate();
        $request->session()->regenerateToken();

        return redirect()->route('public.home');
    }
}