// Next.js API route support: https://nextjs.org/docs/api-routes/introduction
import type {NextApiRequest, NextApiResponse} from "next";
import {app} from "@/firebase";
import {getFirestore, collection, getDocs, getDoc, doc, setDoc} from "firebase/firestore";
import {withIronSessionApiRoute} from "iron-session/next";
import {sessionOptions} from "@/lib/session";
import {User} from "@/interfaces/user";
import {getDownloadURL, getStorage, ref, uploadBytes} from "firebase/storage";
import {getAuth, signInWithEmailAndPassword, updateEmail, updatePassword} from "firebase/auth";
import {errorMessages} from "@/constants/errors";

const db = getFirestore(app);
const storage = getStorage(app);
const auth = getAuth(app);

export default withIronSessionApiRoute(handler, sessionOptions);

async function handler(req: NextApiRequest, res: NextApiResponse) {
	if (!req.session.user) {
		res.status(401).json({ok: false});
		return;
	}

	const userRef = doc(db, "users", req.session.user.id);
	const updatedUser = req.body as User & {password?: string; newPassword?: string};

	if (updatedUser.profilePicture && updatedUser.profilePicture !== req.session.user.profilePicture) {
		const profilePictureFiletype = updatedUser.profilePicture.split(";")[0].split("/")[1];
		const profilePictureRef = ref(storage, `profile_pictures/${req.session.user.id}.${profilePictureFiletype}`);

		const pictureBytes = Buffer.from(updatedUser.profilePicture.split(";base64,")[1], "base64url");
		const pictureSnapshot = await uploadBytes(profilePictureRef, pictureBytes);

		const pictureReference = ref(storage, pictureSnapshot.metadata.fullPath);
		updatedUser.profilePicture = await getDownloadURL(pictureReference);
	}

	if (updatedUser.newPassword && updatedUser.password) {
		try {
			const credential = await signInWithEmailAndPassword(auth, req.session.user.email, updatedUser.password);
			await updatePassword(credential.user, updatedUser.newPassword);
		} catch {
			res.status(400).json({error: "E001", message: errorMessages.E001});
			return;
		}
	}

	if (updatedUser.email !== req.session.user.email && updatedUser.password) {
		try {
			const credential = await signInWithEmailAndPassword(auth, req.session.user.email, updatedUser.password);
			await updateEmail(credential.user, updatedUser.email);
		} catch {
			res.status(400).json({error: "E002", message: errorMessages.E002});
			return;
		}
	}

	delete updatedUser.password;
	delete updatedUser.newPassword;

	await setDoc(userRef, updatedUser, {merge: true});
	req.session.user = {...updatedUser, id: req.session.user.id};
	await req.session.save();

	res.status(200).json({ok: true});
}

export const config = {
	api: {
		bodyParser: {
			sizeLimit: "20mb",
		},
	},
};