package interfaces

import (
	"strconv"

	"mengstack/internal/kernel/response"
	"mengstack/internal/modules/rbac/application"
	"mengstack/internal/modules/rbac/domain"

	"github.com/gin-gonic/gin"
)

type Handler struct {
	svc *application.Service
}

func NewHandler(svc *application.Service) *Handler {
	return &Handler{svc: svc}
}

func (h *Handler) ListPermissions(c *gin.Context) {
	module := c.Query("module")

	var (
		dtos []domain.PermissionDTO
		err  error
	)

	if module != "" {
		dtos, err = h.svc.ListPermissionsByModule(c.Request.Context(), module)
	} else {
		dtos, err = h.svc.ListPermissions(c.Request.Context())
	}

	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dtos)
}

func (h *Handler) CreateRole(c *gin.Context) {
	var req domain.CreateRoleRequest
	if err := c.ShouldBindJSON(&req); err != nil {
		response.Fail(c, response.NewBadRequest("invalid request body"))
		return
	}

	dto, err := h.svc.CreateRole(c.Request.Context(), req)
	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dto)
}

func (h *Handler) ListRoles(c *gin.Context) {
	dtos, err := h.svc.ListRoles(c.Request.Context())
	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dtos)
}

func (h *Handler) GetRole(c *gin.Context) {
	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid role id"))
		return
	}

	dto, err := h.svc.GetRole(c.Request.Context(), uint(id))
	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dto)
}

func (h *Handler) UpdateRole(c *gin.Context) {
	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid role id"))
		return
	}

	var req domain.UpdateRoleRequest
	if err := c.ShouldBindJSON(&req); err != nil {
		response.Fail(c, response.NewBadRequest("invalid request body"))
		return
	}

	dto, err := h.svc.UpdateRole(c.Request.Context(), uint(id), req)
	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dto)
}

func (h *Handler) DeleteRole(c *gin.Context) {
	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid role id"))
		return
	}

	if err := h.svc.DeleteRole(c.Request.Context(), uint(id)); err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, nil)
}

func (h *Handler) SetRolePermissions(c *gin.Context) {
	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid role id"))
		return
	}

	var req domain.SetRolePermissionsRequest
	if err := c.ShouldBindJSON(&req); err != nil {
		response.Fail(c, response.NewBadRequest("invalid request body"))
		return
	}

	if err := h.svc.SetRolePermissions(c.Request.Context(), uint(id), req); err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, nil)
}

func (h *Handler) GetRolePermissions(c *gin.Context) {
	id, err := strconv.ParseUint(c.Param("id"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid role id"))
		return
	}

	dto, err := h.svc.GetRole(c.Request.Context(), uint(id))
	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dto.Permissions)
}

func (h *Handler) AssignRole(c *gin.Context) {
	userID, err := strconv.ParseUint(c.Param("userId"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid user id"))
		return
	}

	var req domain.AssignRoleRequest
	if err := c.ShouldBindJSON(&req); err != nil {
		response.Fail(c, response.NewBadRequest("invalid request body"))
		return
	}

	if err := h.svc.AssignRoleToUser(c.Request.Context(), uint(userID), req); err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, nil)
}

func (h *Handler) RemoveRole(c *gin.Context) {
	userID, err := strconv.ParseUint(c.Param("userId"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid user id"))
		return
	}

	roleID, err := strconv.ParseUint(c.Param("roleId"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid role id"))
		return
	}

	if err := h.svc.RemoveRoleFromUser(c.Request.Context(), uint(userID), uint(roleID)); err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, nil)
}

func (h *Handler) GetUserRoles(c *gin.Context) {
	userID, err := strconv.ParseUint(c.Param("userId"), 10, 64)
	if err != nil {
		response.Fail(c, response.NewBadRequest("invalid user id"))
		return
	}

	dtos, err := h.svc.GetUserPermissions(c.Request.Context(), uint(userID))
	if err != nil {
		response.HandleError(c, err)
		return
	}

	response.Success(c, dtos)
}