package Controllers

import (
	"crypto/tls"
	"larago/app/Model"
	"larago/config"
	"net/http"
	"strconv"
	"time"

	"github.com/gin-gonic/gin"
	"golang.org/x/crypto/bcrypt"
	"gopkg.in/gomail.v2"
)

func Res_pass(router *gin.RouterGroup) {
	router.POST("/post_add", PostForgotPassword)
	router.POST("/pass/:url/post", ViewRes_passListPost)
	router.GET("/api/pass/:url", ApiViewRes_passListPrev)
	router.GET("/api/forgot_password", ApiViewForgotPassword)
}

type Res_passValidation struct {
	Email string `form:"email" json:"email" binding:"required,email"`
}

type Res_passPasswordValidation struct {
	Password string `form:"password" json:"password" binding:"required,min=8,max=255"`
}

func PostForgotPassword(c *gin.Context) {
	// Validate input
	var input Res_passValidation

	if err := c.ShouldBind(&input); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	var model Model.UserModel

	if err := config.DB.Where("email = ?", input.Email).First(&model).Error; err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": "Email not found!"})
		return
	}

	rand_urls := config.RandomString(90)

	//smtp - forgot_password

	m := gomail.NewMessage() // E: undeclared name: gomail
	m.SetHeader("From", config.EnvFunc("MAIL_USERNAME"))
	m.SetHeader("To", input.Email)
	m.SetHeader("Subject", "Password recovery")
	m.SetBody("text/html", "Link to create a new password"+" "+config.EnvFunc("WWWROOT")+"/login/pass/"+rand_urls)

	mail_port, err := strconv.Atoi(config.EnvFunc("MAIL_PORT"))

	if err != nil {
		panic(err)
	}

	mail_encryption, err := strconv.ParseBool(config.EnvFunc("MAIL_ENCRYPTION"))

	if err != nil {
		panic(err)
	}

	d := gomail.NewDialer(
		config.EnvFunc("MAIL_HOST"),
		mail_port,
		config.EnvFunc("MAIL_USERNAME"),
		config.EnvFunc("MAIL_PASSWORD"))

	d.TLSConfig = &tls.Config{InsecureSkipVerify: mail_encryption}

	// Send the email.
	if err := d.DialAndSend(m); err != nil {
		panic(err)
	}

	//Gorm_SQL

	url_res := Model.ResPassUserModel{
		Email:    input.Email,
		Url_full: config.EnvFunc("WWWROOT") + "/login/pass/" + rand_urls,
		Url:      rand_urls,
	}

	config.DB.Save(&url_res)

	c.IndentedJSON(http.StatusOK, gin.H{"data": true})

	time.AfterFunc(30*time.Minute, func() {

		var model_url_del []Model.ResPassUserModel

		config.DB.Where("email = ?", input.Email).Find(&model_url_del)
		config.DB.Delete(&model_url_del)

	})
}

func ViewRes_passListPost(c *gin.Context) { // Get model if exist

	var model Model.ResPassUserModel
	var user_model Model.UserModel

	//Gorm_SQL
	if err := config.DB.Where("url = ?", c.Param("url")).First(&model).Error; err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": "Record not found!"})
		return
	}

	config.DB.Where("email = ?", model.Email).Find(&user_model)

	var input Res_passPasswordValidation

	if err := c.ShouldBind(&input); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	bytePassword := []byte(input.Password)

	passwordHash, _ := bcrypt.GenerateFromPassword(bytePassword, bcrypt.DefaultCost)

	input.Password = string(passwordHash)

	//Gorm_SQL
	config.DB.Model(&user_model).Updates(Model.UserModel{Password: input.Password})

	c.IndentedJSON(http.StatusOK, gin.H{"data": true})

}

func ApiViewForgotPassword(c *gin.Context) {

	c.IndentedJSON(http.StatusOK, gin.H{"mess": "ok"})

	//ForgotPassword.vue

}

func ApiViewRes_passListPrev(c *gin.Context) {

	var model Model.ResPassUserModel

	//Gorm_SQL
	if err := config.DB.Where("url = ?", c.Param("url")).First(&model).Error; err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": "Record not found!"})
		return
	}

	c.IndentedJSON(http.StatusOK, gin.H{
		"url": model.Url,
	})

	//ResetPassword.vue

}