"use strict";

const { getService } = require("@strapi/plugin-users-permissions/server/utils");

/**
 * vendor controller
 */

const { createCoreController } = require("@strapi/strapi").factories;

module.exports = createCoreController("api::vendor.vendor", () => ({
  async create(ctx) {
    // console.log("ctx", ctx.request.body);
    // Get user from user entity
    const currentUser = await strapi
      .query("plugin::users-permissions.user")
      .findOne({
        populate: ["user"],
        where: {
          $and: [{ email: ctx.request.body.data.email }],
        },
      });
    //   Check if its already existing in vendor entity
    // console.log("currentUser", currentUser);

    let existingUser;
    existingUser = await strapi.entityService.findMany("api::vendor.vendor", {
      fields: ["id"],
      filter: { phoneNumber: ctx.request.body.data.phoneNumber },
    });

    if (!existingUser) {
      existingUser = await strapi.entityService.findMany("api::vendor.vendor", {
        fields: ["id"],
        filters: { email: ctx.request.body.data.email },
      });
    }

    // Generate one time password (otp)
    const oneTimePassword = Math.floor(1000 + Math.random() * 9000);

    await strapi.entityService.update(
      "plugin::users-permissions.user",
      currentUser.id,
      {
        data: {
          oneTimePassword: `${oneTimePassword}`,
        },
      }
    );
    const date = new Date();
    // TODO: Code to send OTP on email
    // TODO: Code to send OTP on SMS

    if (existingUser && existingUser.length !== 0) {
    } else {
      ctx.request.body.data.user = currentUser.id;
      const response = await strapi.entityService.create("api::vendor.vendor", {
        data: { ...ctx.request.body.data, publishedAt: date },
      });
      console.log("response", response);
      return { otpSent: true, data: response };

      //   ctx.request.body.data.user = currentUser;
      //   console.log("ctx.request.body.data", ctx.request.body.data);
      //   return await super.create(ctx);
    }

    ctx.send({
      ok: true,
      message: "Existing vendor found, skipping creation only sent OTP.",
    });
  },

  async finishVendorOtpVerification(ctx) {
    const { email, oneTimePassword } = ctx.request.body;
    // 1. Identify the end-user record using the above.
    console.log("email", email, oneTimePassword);
    const vendorUser = await strapi
      .query("plugin::users-permissions.user")
      .findOne({
        populate: ["user"],
        where: {
          $and: [{ email: email }],
        },
      });

    if (!vendorUser) {
      // throw new ValidationError("Invalid mobile number");

      ctx.send({ ok: false, message: "Invalid mobile number" });
    }
    console.log("endUser", vendorUser);
    // 2. Then identify the user record using step 1.
    // 3. Verify otp.
    const user = await strapi.query("plugin::users-permissions.user").findOne({
      where: {
        $and: [{ id: vendorUser.id }, { oneTimePassword: oneTimePassword }],
      },
    });
    console.log("USER", user);

    if (!user || user.blocked) {
      console.log("invalid otp >>");
      ctx.send({
        ok: false,
        message: "OTP is invalid, please enter the correct OTP!",
      });
    }

    if (user) {
      await getService("user").edit(user.id, {
        oneTimePassword: null,
        confirmed: true,
      });
    }
    // 4. stamp otp in user to null.

    if (user) {
      ctx.send({ ok: true, message: "user registered" });
    } else if (!user) {
      ctx.send({
        ok: false,
        message: "OTP is invalid, please enter the correct OTP!",
      });
    }
  },
}));