<?php

namespace App\Http\Controllers\Api\V1\Auth;

use App\Http\Controllers\Api\V1\ApiController;
use App\Models\User;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;

class VerifyEmailController extends ApiController
{
    /**
     * Resident clicks the link in the verification email. Laravel signs
     * the URL with the user's id + a hash of their email; we re-validate
     * here and flip email_verified_at.
     *
     * Route is wrapped in `signed` middleware which verifies the URL
     * signature before this method runs.
     */
    public function verify(Request $request, int $id, string $hash): JsonResponse
    {
        $user = User::find($id);
        if (! $user) {
            return $this->fail('Invalid verification link', null, 404);
        }

        if (! hash_equals(sha1($user->getEmailForVerification()), $hash)) {
            return $this->fail('Invalid verification link', null, 403);
        }

        if ($user->hasVerifiedEmail()) {
            return $this->ok(['already_verified' => true], 'Email already verified');
        }

        $user->markEmailAsVerified();

        return $this->ok([
            'verified' => true,
            'email' => $user->email,
        ], 'Email verified');
    }

    /**
     * Send (or resend) the verification email to the authenticated user.
     */
    public function resend(Request $request): JsonResponse
    {
        $user = $request->user();

        if ($user->hasVerifiedEmail()) {
            return $this->ok(['already_verified' => true], 'Email already verified');
        }

        $user->sendEmailVerificationNotification();

        return $this->ok([
            'sent' => true,
            'destination' => $user->email,
        ], 'Verification email sent');
    }
}