import type { Handler } from 'hono';
import type { User } from 'types';
import { officerdb, eq, Users } from 'officerdb';
import { verify as verifyJwt, sign } from '@@/jwt';
import argon2 from 'argon2';
import * as errors from '@@/custom-errors';
import { validatePassword } from './validate-password';

export const verifyHandler: Handler = async function (ctx) {
  const { verificationCode, name, password, confirmPassword } = ctx.get('body');
  const userInfo = (await verifyJwt(verificationCode)) as User;
  if (!userInfo) throw errors.BAD_REQUEST();

  const user = await officerdb.query.Users.findFirst({
    where: eq(Users.id, userInfo.id),
  });
  if (!user) throw errors.NOT_FOUND('User not found');

  const updates: Record<string, unknown> = { status: 'Active' };

  if (name) {
    if (typeof name !== 'string' || !name.trim() || name.length > 128) {
      throw errors.BAD_REQUEST('Name must be between 1 and 128 characters');
    }
    updates.name = name.trim();
  }

  if (password) {
    validatePassword(password);
    if (password !== confirmPassword) {
      throw errors.BAD_REQUEST('Passwords do not match');
    }
    updates.password = await argon2.hash(password);
  }

  await officerdb.update(Users).set(updates).where(eq(Users.id, userInfo.id));

  // Issue a token so the user is logged in immediately
  const token = await sign({ id: userInfo.id, email: userInfo.email });

  return ctx.json({ ok: true, token });
};