use super::AuthenticatedUser;
use crate::api::error::ApiError;
use crate::state::AppState;
use crate::types::Did;

pub struct AccountVerified<'a> {
    user: &'a AuthenticatedUser,
}

impl<'a> AccountVerified<'a> {
    pub fn did(&self) -> &Did {
        &self.user.did
    }

    pub fn user(&self) -> &AuthenticatedUser {
        self.user
    }
}

pub async fn require_verified_or_delegated<'a>(
    state: &AppState,
    user: &'a AuthenticatedUser,
) -> Result<AccountVerified<'a>, ApiError> {
    if tranquil_config::get()
        .server
        .disable_account_verification_gate
    {
        return Ok(AccountVerified { user });
    }

    let is_verified = state
        .repos
        .user
        .has_verified_comms_channel(&user.did)
        .await
        .unwrap_or(false);

    if is_verified {
        return Ok(AccountVerified { user });
    }

    let is_delegated = state
        .repos
        .delegation
        .is_delegated_account(&user.did)
        .await
        .unwrap_or(false);

    if is_delegated {
        return Ok(AccountVerified { user });
    }

    Err(ApiError::AccountNotVerified)
}

pub async fn require_not_migrated(state: &AppState, did: &Did) -> Result<(), ApiError> {
    match state.repos.user.is_account_migrated(did).await {
        Ok(true) => Err(ApiError::AccountMigrated),
        Ok(false) => Ok(()),
        Err(e) => {
            tracing::error!("Failed to check migration status: {:?}", e);
            Err(ApiError::InternalError(Some(
                "Failed to verify migration status".into(),
            )))
        }
    }
}
