using FindAndDrive.Domain.Interfaces.Services;
using FindAndDrive.Domain.Models.DTO.Request;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace FindAndDrive.API.Controllers;

[ApiController]
[Route("api/[controller]")]
public class AuthenticationController : ControllerBase
{
    private readonly IAuthenticationService _authenticationService;
    public AuthenticationController(IAuthenticationService authenticationService)
    {
        _authenticationService = authenticationService;
    }
    /// <summary>
    /// Generate a bearer token
    /// </summary>

    [AllowAnonymous]
    [HttpPost("token")]
    public async Task<IActionResult> GetToken([FromBody] TokenRequest request)
    {
        var response = await _authenticationService.Authenticate(request.ApiKeyId, request.ApiSecret);
        if (!response.Success) return Unauthorized(response.Message);

        return Ok(response.ResponseObject);
    }
    /// <summary>
    /// Refresh your current token
    /// </summary>
    [Authorize]
    [HttpPost("refresh")]
    public async Task<IActionResult> RefreshToken()
    {
        var token = Request.Headers["Authorization"]
            .First()
            .Split(" ")
            .Last();

        var response = await _authenticationService.RefreshToken(token);
        if (!response.Success) return Unauthorized(response.Message);

        return Ok(response.ResponseObject);
    }
}