import { cookies } from "next/headers";

import { getDb } from "@stepping/db";

import {

  SESSION_COOKIE,

  verifyCredentials,

  createSession,

  destroySession,

  validateSession,

  type SessionUser,

} from "@stepping/api";

export async function getCurrentUser(): Promise<SessionUser | null> {

  const token = (await cookies()).get(SESSION_COOKIE)?.value ?? null;

  return validateSession(getDb(), token);

}

export function isAdmin(u: SessionUser | null): boolean {

  return u?.role === "admin" || u?.role === "moderator";

}

export async function login(email: string, password: string): Promise<boolean> {

  const db = getDb();

  const userId = await verifyCredentials(db, email, password);

  if (!userId) return false;

  const { token, expiresAt } = await createSession(db, userId);

  (await cookies()).set(SESSION_COOKIE, token, {

    httpOnly: true,

    secure: process.env.STEPPING_SECURE_COOKIES === "1",

    sameSite: "lax",

    path: "/",

    expires: expiresAt,

  });

  return true;

}

export async function logout(): Promise<void> {

  const jar = await cookies();

  const token = jar.get(SESSION_COOKIE)?.value;

  await destroySession(getDb(), token);

  jar.delete(SESSION_COOKIE);

}