using BCrypt.Net;
using Knot.Contracts.Auth.Application.Abstractions;
using Knot.Contracts.Auth.Application.Auth.DTOs;
using Knot.Shared.Kernel;

namespace Knot.Modules.Auth.Application.Users.Login;

/// <summary>
/// ������� ��� ����� ������������. ���������� AuthResponseDto.
/// </summary>
public sealed record LoginUserCommand(string Username, string Password) : ICommand<AuthResponseDto>;

public sealed class LoginUserCommandHandler : ICommandHandler<LoginUserCommand, AuthResponseDto>
{
    private readonly IUserRepository _userRepository;
    private readonly IJwtTokenProvider _tokenProvider;

    public LoginUserCommandHandler(IUserRepository userRepository, IJwtTokenProvider tokenProvider)
    {
        _userRepository = userRepository;
        _tokenProvider = tokenProvider;
    }

    public async Task<Result<AuthResponseDto>> Handle(LoginUserCommand request, CancellationToken cancellationToken)
    {
        var user = await _userRepository.GetByUsernameAsync(request.Username, cancellationToken);

        if (user is null || !BCrypt.Net.BCrypt.Verify(request.Password, user.PasswordHash))
        {
            return Result.Failure<AuthResponseDto>(AuthErrors.IdentityInvalidCredentials);
        }

        string token = _tokenProvider.Generate(user.Id, user.Username, user.DisplayName, user.Avatar);

        return Result.Success(new AuthResponseDto
        {
            AccessToken = token,
            RefreshToken = string.Empty,
            UserId = user.Id,
            Username = user.Username,
            DisplayName = user.DisplayName
        });
    }
}