Oxicloud/src/interfaces/api/handlers/share_handler.rs

use std::sync::Arc;

use axum::{
    extract::{Path, Query, State},
    http::StatusCode,
    response::IntoResponse,
    Json,
};
use serde::Deserialize;
use serde_json::json;

use crate::{
    application::{
        dtos::share_dto::{CreateShareDto, UpdateShareDto}, 
        ports::share_ports::ShareUseCase
    },
    common::errors::ErrorKind,
};

#[derive(Debug, Deserialize)]
pub struct GetSharesQuery {
    pub page: Option<usize>,
    pub per_page: Option<usize>,
}

#[derive(Debug, Deserialize)]
pub struct VerifyPasswordRequest {
    pub password: String,
}

/// Create a new shared link
pub async fn create_shared_link(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Json(dto): Json<CreateShareDto>,
) -> impl IntoResponse {
    // For now, we'll use a default user ID until auth is implemented
    let user_id = "default-user";
    match share_use_case.create_shared_link(&user_id, dto).await {
        Ok(share) => (StatusCode::CREATED, Json(share)).into_response(),
        Err(err) => {
            let status = match err.kind {
                ErrorKind::NotFound => StatusCode::NOT_FOUND,
                ErrorKind::InvalidInput => StatusCode::BAD_REQUEST,
                _ => StatusCode::INTERNAL_SERVER_ERROR,
            };
            (status, Json(json!({ "error": err.to_string() }))).into_response()
        }
    }
}

/// Get information about a specific shared link by ID
pub async fn get_shared_link(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Path(id): Path<String>,
) -> impl IntoResponse {
    match share_use_case.get_shared_link(&id).await {
        Ok(share) => (StatusCode::OK, Json(share)).into_response(),
        Err(err) => {
            let status = match err.kind {
                ErrorKind::NotFound => StatusCode::NOT_FOUND,
                _ => StatusCode::INTERNAL_SERVER_ERROR,
            };
            (status, Json(json!({ "error": err.to_string() }))).into_response()
        }
    }
}

/// Get all shared links created by the current user
pub async fn get_user_shares(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Query(query): Query<GetSharesQuery>,
) -> impl IntoResponse {
    // For now, we'll use a default user ID until auth is implemented
    let user_id = "default-user";
    let page = query.page.unwrap_or(1);
    let per_page = query.per_page.unwrap_or(20);
    
    match share_use_case.get_user_shared_links(&user_id, page, per_page).await {
        Ok(shares) => (StatusCode::OK, Json(shares)).into_response(),
        Err(err) => (StatusCode::INTERNAL_SERVER_ERROR, Json(json!({ "error": err.to_string() }))).into_response()
    }
}

/// Update a shared link's properties
pub async fn update_shared_link(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Path(id): Path<String>,
    Json(dto): Json<UpdateShareDto>,
) -> impl IntoResponse {
    match share_use_case.update_shared_link(&id, dto).await {
        Ok(share) => (StatusCode::OK, Json(share)).into_response(),
        Err(err) => {
            let status = match err.kind {
                ErrorKind::NotFound => StatusCode::NOT_FOUND,
                ErrorKind::AccessDenied => StatusCode::FORBIDDEN,
                ErrorKind::InvalidInput => StatusCode::BAD_REQUEST,
                _ => StatusCode::INTERNAL_SERVER_ERROR,
            };
            (status, Json(json!({ "error": err.to_string() }))).into_response()
        }
    }
}

/// Delete a shared link
pub async fn delete_shared_link(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Path(id): Path<String>,
) -> impl IntoResponse {
    match share_use_case.delete_shared_link(&id).await {
        Ok(_) => StatusCode::NO_CONTENT.into_response(),
        Err(err) => {
            let status = match err.kind {
                ErrorKind::NotFound => StatusCode::NOT_FOUND,
                ErrorKind::AccessDenied => StatusCode::FORBIDDEN,
                _ => StatusCode::INTERNAL_SERVER_ERROR,
            };
            (status, Json(json!({ "error": err.to_string() }))).into_response()
        }
    }
}

/// Access a shared item via its token
pub async fn access_shared_item(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Path(token): Path<String>,
) -> impl IntoResponse {
    // Register the access
    let _ = share_use_case.register_shared_link_access(&token).await;
    
    // Get the shared link
    match share_use_case.get_shared_link_by_token(&token).await {
        Ok(item) => (StatusCode::OK, Json(item)).into_response(),
        Err(err) => {
            let status = match err.kind {
                ErrorKind::NotFound => StatusCode::NOT_FOUND,
                ErrorKind::AccessDenied => {
                    if err.message.contains("expired") {
                        StatusCode::GONE // HTTP 410 Gone for expired links
                    } else if err.message.contains("password") {
                        return (StatusCode::UNAUTHORIZED, Json(json!({ 
                            "error": "Password required", 
                            "requiresPassword": true 
                        }))).into_response();
                    } else {
                        StatusCode::FORBIDDEN
                    }
                },
                _ => StatusCode::INTERNAL_SERVER_ERROR,
            };
            
            (status, Json(json!({ "error": err.to_string() }))).into_response()
        }
    }
}

/// Verify password for a password-protected shared item
pub async fn verify_shared_item_password(
    State(share_use_case): State<Arc<dyn ShareUseCase>>,
    Path(token): Path<String>,
    Json(req): Json<VerifyPasswordRequest>,
) -> impl IntoResponse {
    match share_use_case.verify_shared_link_password(&token, &req.password).await {
        Ok(item) => (StatusCode::OK, Json(item)).into_response(),
        Err(err) => {
            let status = match err.kind {
                ErrorKind::NotFound => StatusCode::NOT_FOUND,
                ErrorKind::AccessDenied => {
                    if err.message.contains("expired") {
                        StatusCode::GONE
                    } else if err.message.contains("password") {
                        StatusCode::UNAUTHORIZED
                    } else {
                        StatusCode::FORBIDDEN
                    }
                },
                _ => StatusCode::INTERNAL_SERVER_ERROR,
            };
            (status, Json(json!({ "error": err.to_string() }))).into_response()
        }
    }
}