// ***********************************************************************
// <copyright file="PermissionController.cs">
//     AgileWebs
// </copyright>
// ***********************************************************************

using Asp.Versioning;
using Core.Blueprint.Mongo;
using Core.Thalos.Adapters;
using Core.Thalos.Adapters.Attributes;
using Core.Thalos.Adapters.Common.Constants;
using Core.Thalos.Provider.Contracts;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Graph;
using PermissionRequest = Core.Thalos.Domain.Contexts.Onboarding.Request.PermissionRequest;

namespace LSA.Core.Thalos.API.Controllers
{
    /// <summary>
    /// Handles all requests for permission authentication.
    /// </summary>
    [ApiVersion(MimeTypes.ApplicationVersion)]
    [Route("api/v{api-version:apiVersion}/[controller]")]
    [Produces(MimeTypes.ApplicationJson)]
    [Consumes(MimeTypes.ApplicationJson)]
    [ApiController]
    public class PermissionController(IPermissionProvider service) : ControllerBase
    {
        /// <summary>
        /// Gets all the permissions.
        /// </summary>
        /// <returns>The <see cref="IEnumerable{PermissionAdapter}"/> found entities.</returns>
        /// <response code="200">The roles found.</response>
        /// <response code="404">The roles not found error.</response>
        /// <response code="500">The service internal error.</response>
        [HttpGet]
        [Consumes(MimeTypes.ApplicationJson)]
        [Produces(MimeTypes.ApplicationJson)]
        [ProducesResponseType(typeof(IEnumerable<PermissionAdapter>), StatusCodes.Status200OK)]
        //[Authorize(AuthenticationSchemes = Schemes.DefaultScheme)]
        //[Permission("PermissionManagement.Read, RoleManagement.Read")]
        public async Task<IActionResult> GetAllPermissionsAsync(CancellationToken cancellationToken)
        {
            var result = await service.GetAllPermissions(cancellationToken).ConfigureAwait(false);
            return Ok(result);
        }

        /// <summary>
        /// Gets all the permissions by permission identifiers.
        /// </summary>
        /// <param name="permissions">The list of permission identifiers.</param>
        /// <returns>The <see cref="IEnumerable{PermissionAdapter}"/> found entities.</returns>
        /// <response code="200">The permissions found.</response>
        /// <response code="404">The permissions not found error.</response>
        /// <response code="500">The service internal error.</response>
        [HttpPost]
        [Route(Routes.GetPermissionList)]
        [Consumes(MimeTypes.ApplicationJson)]
        [Produces(MimeTypes.ApplicationJson)]
        [ProducesResponseType(typeof(IEnumerable<PermissionAdapter>), StatusCodes.Status200OK)]
        //[Authorize(AuthenticationSchemes = Schemes.DefaultScheme)]
        //[Permission("PermissionManagement.Read")]
        public async Task<IActionResult> GetAllPermissionsByList([FromBody] string[] permissions, CancellationToken cancellationToken)
        {
            if (permissions == null || !permissions.Any())
            {
                return BadRequest("Permissions identifiers are required.");
            }

            var result = await service.GetAllPermissionsByList(permissions, cancellationToken).ConfigureAwait(false);
            return Ok(result);
        }

        /// <summary>
        /// Gets the permission by identifier.
        /// </summary>
        /// <param name="id">The permission identifier.</param>
        /// <returns>The <see cref="PermissionAdapter"/> found entity.</returns>
        /// <response code="200">The permission found.</response>
        /// <response code="404">The permission not found error.</response>
        /// <response code="500">The service internal error.</response>
        [HttpGet]
        [Route(Routes.Id)]
        [Consumes(MimeTypes.ApplicationJson)]
        [Produces(MimeTypes.ApplicationJson)]
        [ProducesResponseType(typeof(PermissionAdapter), StatusCodes.Status200OK)]
        //[Authorize(AuthenticationSchemes = Schemes.DefaultScheme)]
        //[Permission("PermissionManagement.Read")]
        public async Task<IActionResult> GetPermissionByIdAsync([FromRoute] string id, CancellationToken cancellationToken)
        {
            var result = await service.GetPermissionById(id, cancellationToken).ConfigureAwait(false);

            if (result == null)
            {
                return NotFound("Entity not found");
            }

            return Ok(result);
        }

        /// <summary>
        /// Creates a new permission.
        /// </summary>
        /// <param name="newPermission">The permission to be added.</param>
        /// <returns>The <see cref="PermissionAdapter"/> created entity.</returns>
        /// <response code="201">The permission created.</response>
        /// <response code="422">The permission could not be created.</response>
        /// <response code="500">The service internal e|ror.</response>
        [HttpPost]
        [ProducesResponseType(typeof(PermissionAdapter), StatusCodes.Status201Created)]
        //[Authorize(AuthenticationSchemes = Schemes.DefaultScheme)]
        //[Permission("PermissionManagement.Write")]
        public async Task<IActionResult> CreatePermissionAsync([FromBody] PermissionRequest newPermission, CancellationToken cancellationToken)
        {
            var result = await service.CreatePermission(newPermission, cancellationToken).ConfigureAwait(false);
            return Created("CreatedWithIdAsync", result);
        }

        /// <summary>
        /// Updates a full permission by identifier.
        /// </summary>
        /// <param name="entity">The permission to update.</param>
        /// <param name="id">The permission identifier.</param>
        /// <returns>The <see cref="PermissionAdapter"/> updated entity.</returns>
        /// <response code="200">The permission updated.</response>
        /// <response code="404">The permission not found.</response>
        /// <response code="422">The permission could not be updated.</response>
        /// <response code="500">The service internal error.</response>
        [HttpPut]
        [Route(Routes.Id)]
        [Consumes(MimeTypes.ApplicationJson)]
        [Produces(MimeTypes.ApplicationJson)]
        [ProducesResponseType(typeof(PermissionAdapter), StatusCodes.Status200OK)]
        //[Authorize(AuthenticationSchemes = Schemes.DefaultScheme)]
        //[Permission("PermissionManagement.Write")]
        public async Task<IActionResult> UpdatePermissionAsync([FromRoute] string id, PermissionAdapter entity, CancellationToken cancellationToken)
        {
            if (id != entity.Id?.ToString())
            {
                return BadRequest("Permission ID mismatch");
            }

            var result = await service.UpdatePermission(entity, cancellationToken).ConfigureAwait(false);

            return Ok(result);
        }

        /// <summary>
        /// Changes the status of the permission.
        /// </summary>
        /// <param name="id">The permission identifier.</param>
        /// <param name="newStatus">The new status of the permission.</param>
        /// <returns>The <see cref="PermissionAdapter"/> updated entity.</returns>
        /// <response code="200">The permission updates.</response>
        /// <response code="404">The permission not found.</response>
        /// <response code="422">The permission could not be deleted.</response>
        /// <response code="500">The service internal error.</response>
        [HttpPatch]
        [Route(Routes.ChangeStatus)]
        [Consumes(MimeTypes.ApplicationJson)]
        [Produces(MimeTypes.ApplicationJson)]
        [ProducesResponseType(typeof(PermissionAdapter), StatusCodes.Status200OK)]
        //[Authorize(AuthenticationSchemes = Schemes.DefaultScheme)]
        //[Permission("PermissionManagement.Write")]
        public async Task<IActionResult> ChangePermissionStatus([FromRoute] string id, [FromRoute] StatusEnum newStatus, CancellationToken cancellationToken)
        {
            var result = await service.ChangePermissionStatus(id, newStatus, cancellationToken).ConfigureAwait(false);
            return Ok(result);
        }
    }
}