<?php

namespace App\Http\Controllers;

use App\Enums\InstallationStatus;
use App\Models\ApplicationInstallation;
use App\Models\User;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\View\View;

class PlatformAuthController extends Controller
{
    public function showLogin(Request $request): View|RedirectResponse
    {
        if ($request->user()?->isSuperAdmin) {
            return redirect()->route('manager.dashboard');
        }

        if (! ApplicationInstallation::query()->where('status', InstallationStatus::Installed)->exists()) {
            return redirect()->route('install');
        }

        return view('auth.platform-sign-in');
    }

    public function login(Request $request): RedirectResponse
    {
        $credentials = $request->validate([
            'email' => ['required', 'email', 'max:190'],
            'password' => ['required', 'string'],
        ]);

        if (! Auth::attempt($credentials, $request->boolean('remember'))) {
            Auth::logout();

            return back()->withErrors(['email' => 'Those platform administrator details do not match our records.'])->onlyInput('email');
        }

        $user = $request->user();
        if (! $user?->isSuperAdmin) {
            $installation = ApplicationInstallation::query()
                ->where('status', InstallationStatus::Installed)
                ->first();

            $canUpgradeLegacyAdmin = ! User::query()->where('isSuperAdmin', true)->exists()
                && $installation?->initialAdminUserId === $user?->id;

            if (! $canUpgradeLegacyAdmin) {
                Auth::logout();

                return back()->withErrors(['email' => 'Those platform administrator details do not match our records.'])->onlyInput('email');
            }

            // Existing installations created before platform administration
            // was separated may have only an initial business owner. Promote
            // that exact recorded account once so the migration is usable.
            $user->forceFill(['isSuperAdmin' => true])->save();
            Auth::setUser($user->fresh());
        }

        $request->session()->regenerate();

        return redirect()->intended(route('manager.dashboard'));
    }
}