<?php

namespace App\Http\Controllers\Api\V1\Auth;

use App\Http\Controllers\Api\V1\ApiController;
use App\Http\Requests\Auth\ForgotPasswordRequest;
use App\Models\OtpCode;
use App\Models\User;
use App\Services\Otp\OtpService;
use Illuminate\Http\JsonResponse;

class ForgotPasswordController extends ApiController
{
    public function __invoke(ForgotPasswordRequest $request, OtpService $otp): JsonResponse
    {
        $phone = $request->validated('phone');
        $user = User::where('phone', $phone)->first();

        $debugCode = null;
        if ($user) {
            $issue = $otp->issue(
                destination: $phone,
                purpose: OtpCode::PURPOSE_PASSWORD_RESET,
                user: $user,
            );
            $debugCode = $issue->plainCode;
        }

        return $this->ok([
            'otp_destination' => $phone,
            'debug_code' => app()->environment('local', 'testing') ? $debugCode : null,
        ], 'If an account exists for that phone, a reset code has been sent.');
    }
}