// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
import { ApprovalWorkflow } from "@/interfaces/approval.workflow";
import { sessionOptions } from "@/lib/session";
import { requestUser } from "@/utils/api";
import { deleteApprovalWorkflow, updateApprovalWorkflow } from "@/utils/approval.workflows.be";
import { withIronSessionApiRoute } from "iron-session/next";
import { ObjectId } from "mongodb";
import type { NextApiRequest, NextApiResponse } from "next";

export default withIronSessionApiRoute(handler, sessionOptions);

async function handler(req: NextApiRequest, res: NextApiResponse) {
    if (req.method === "DELETE") return await del(req, res);
    if (req.method === "PUT") return await put(req, res);
}

async function del(req: NextApiRequest, res: NextApiResponse) {
    const user = await requestUser(req, res);
    if (!user) return res.status(401).json({ ok: false });

    if (!["admin", "developer", "corporate", "mastercorporate"].includes(user.type)) {
        return res.status(403).json({ ok: false });
    }

    const { id } = req.query as { id?: string };

    if (id) return res.status(200).json(await deleteApprovalWorkflow("configured-workflows", id));
}

async function put(req: NextApiRequest, res: NextApiResponse) {
    const user = await requestUser(req, res);
    if (!user) return res.status(401).json({ ok: false });

    if (!["admin", "developer", "corporate", "mastercorporate"].includes(user.type)) {
        return res.status(403).json({ ok: false });
    }

    const { id } = req.query as { id?: string };
    const workflow: ApprovalWorkflow = req.body;

    if (id && workflow) {
        workflow._id = new ObjectId(id);
        await updateApprovalWorkflow("configured-workflows", workflow);
        return res.status(204).end();
    }
}