namespace IOL.GreatOffice.Api.Endpoints.Internal.PasswordResetRequests;

/// <inheritdoc />
public class FulfillResetRequestRoute : RouteBaseAsync.WithRequest<FulfillResetRequestPayload>.WithActionResult
{
	private readonly PasswordResetService _passwordResetService;

	/// <inheritdoc />
	public FulfillResetRequestRoute(PasswordResetService passwordResetService) {
		_passwordResetService = passwordResetService;
	}

	/// <summary>
	/// Fulfill a password reset request.
	/// </summary>
	/// <param name="request"></param>
	/// <param name="cancellationToken"></param>
	/// <returns></returns>
	[AllowAnonymous]
	[HttpPost("~/_/password-reset-request/fulfill")]
	public override async Task<ActionResult> HandleAsync(FulfillResetRequestPayload request, CancellationToken cancellationToken = default) {
		try {
			var fulfilled = await _passwordResetService.FullFillRequestAsync(request.Id, request.NewPassword, cancellationToken);
			return Ok(fulfilled);
		} catch (Exception e) {
			if (e is ForgotPasswordRequestNotFoundException or UserNotFoundException) {
				return NotFound();
			}

			throw;
		}
	}
}