using System.Security.Claims;
using Application.Abstractions.Messaging;
using Web.Api.Common;
using Web.Api.Extensions;

namespace Web.Api.Endpoints.MyPage;

internal sealed class ChangePassword : IEndpoint
{
    public sealed record Request(
        string CurrentPassword,
        string NewPassword,
        string ConfirmPassword
    );

    public void MapEndpoint(IEndpointRouteBuilder app)
    {
        app.MapPost("api/mypage/password", async (
            Request request,
            ClaimsPrincipal user,
            ISender sender,
            CancellationToken ct
        ) => {
            var memberID = user.GetMemberID();

            if (memberID is null)
            {
                return ApiResponse.Fail(StatusCodes.Status401Unauthorized, "Invalid token");
            }

            var command = new Application.Features.Api.MyPage.ChangePassword.Command(
                memberID.Value,
                request.CurrentPassword,
                request.NewPassword,
                request.ConfirmPassword
            );

            var result = await sender.Send(command, ct);

            return result.Match(
                () => ApiResponse.Ok(),
                CustomResults.Problem
            );
        })
        .WithTags("MyPage")
        .RequireAuthorization();
    }
}