const jwt = require("jsonwebtoken");
const logger = require("../utils/logger");
const SERVICE_NAME = "verifyAdmin";
const TOKEN_PREFIX = "Bearer ";
import ServiceRegistry from "../service/serviceRegistry.js";
import SettingsService from "../service/settingsService.js";
import StringService from "../service/stringService.js";
/**
 * Verifies the JWT token
 * @function
 * @param {express.Request} req
 * @param {express.Response} res
 * @param {express.NextFunction} next
 * @returns {express.Response}
 */
const verifySuperAdmin = (req, res, next) => {
	const stringService = ServiceRegistry.get(StringService.SERVICE_NAME);
	const token = req.headers["authorization"];
	// Make sure a token is provided
	if (!token) {
		const error = new Error(stringService.noAuthToken);
		error.status = 401;
		error.service = SERVICE_NAME;
		next(error);
		return;
	}
	// Make sure it is properly formatted
	if (!token.startsWith(TOKEN_PREFIX)) {
		const error = new Error(stringService.invalidAuthToken); // Instantiate a new Error object for improperly formatted token
		error.status = 400;
		error.service = SERVICE_NAME;
		error.method = "verifySuperAdmin";
		next(error);
		return;
	}

	const parsedToken = token.slice(TOKEN_PREFIX.length, token.length);
	// verify admin role is present
	const { jwtSecret } = ServiceRegistry.get(SettingsService.SERVICE_NAME).getSettings();

	jwt.verify(parsedToken, jwtSecret, (err, decoded) => {
		if (err) {
			logger.error({
				message: err.message,
				service: SERVICE_NAME,
				method: "verifySuperAdmin",
				stack: err.stack,
				details: stringService.invalidAuthToken,
			});
			return res
				.status(401)
				.json({ success: false, msg: stringService.invalidAuthToken });
		}

		if (decoded.role.includes("superadmin") === false) {
			logger.error({
				message: stringService.invalidAuthToken,
				service: SERVICE_NAME,
				method: "verifySuperAdmin",
				stack: err.stack,
			});
			return res.status(401).json({ success: false, msg: stringService.unauthorized });
		}
		next();
	});
};

module.exports = { verifySuperAdmin };