<?php

namespace App\Controllers;

use eftec\bladeone\BladeOne;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
use Monolog\Logger;
use App\Services\Sanitizer;
use App\Services\BaseController;
use App\Models\TwigExample;
use Twig\Environment;

class TwigExampleController extends BaseController
{
    protected $twig;
    protected $logger;
    protected $blade;

    public function __construct(Environment $twig, Logger $logger, BladeOne $blade)
    {
        $this->twig = $twig;
        $this->logger = $logger;
        $this->blade = $blade;
    }

    protected function validateCsrfToken($token)
    {
        return hash_equals($_SESSION['csrf_token'], $token);
    }

    public function index(Request $request): string
    {
        try {
            $twigexample = TwigExample::all();
            $this->logger->info('Displaying the TwigExampleController page.');

            if ($twigexample->isEmpty()) {
                $this->logger->warning('No records found in the database.');
                // Continue with rendering the view instead of returning a message
            }

            $twigexample = Sanitizer::sanitizeOutput($twigexample->toArray());

            return $this->twig->render('twigexample/index.twig.php', ['twigexample' => $twigexample]);
        } catch (\Exception $e) {
            $this->logger->error('Error querying the database: ' . $e->getMessage());
            return 'Error querying the database: ' . $e->getMessage();
        }
    }

    public function create(Request $request): string
    {
        try {
            $this->logger->info('Displaying the creation page of the TwigExampleController.');
            return $this->twig->render('twigexample/create.twig.php', ['csrf_token' => htmlspecialchars(getCsrfToken(), ENT_QUOTES, 'UTF-8')]);
        } catch (\Exception $e) {
            $this->logger->error('Error displaying the creation page: ' . $e->getMessage());
            return 'Error displaying the creation page: ' . $e->getMessage();
        }
    }

    public function edit(Request $request, $id): string
    {
        try {
            $twigexample = TwigExample::find($id);

            if (!$twigexample) {
                $this->logger->warning("Record with ID $id not found.");
                return "Record with ID $id not found.";
            }

            $twigexample = Sanitizer::sanitizeOutput($twigexample->toArray());

            $this->logger->info("Displaying the edit page for the record with ID: $id.");
            return $this->twig->render('twigexample/edit.twig.php', ['twigexample' => $twigexample, 'csrf_token' => htmlspecialchars(getCsrfToken(), ENT_QUOTES, 'UTF-8')]);
        } catch (\Exception $e) {
            $this->logger->error('Error displaying the edit page: ' . $e->getMessage());
            return 'Error displaying the edit page: ' . $e->getMessage();
        }
    }

    public function show(Request $request, $id): string
    {
        try {
            $twigexample = TwigExample::find($id);

            if (!$twigexample) {
                $this->logger->warning("Record with ID $id not found.");
                return "Record with ID $id not found.";
            }

            $twigexample = Sanitizer::sanitizeOutput($twigexample->toArray());

            $this->logger->info("Displaying the record with ID: $id.");
            return $this->twig->render('twigexample/show.twig.php', ['twigexample' => $twigexample]);
        } catch (\Exception $e) {
            $this->logger->error('Error displaying the record: ' . $e->getMessage());
            return 'Error displaying the record: ' . $e->getMessage();
        }
    }

    public function delete(Request $request, $id)
    {
        try {
            $twigexample = TwigExample::find($id);

            if (!$twigexample) {
                $this->logger->warning("Record with ID $id not found.");
                return "Record with ID $id not found.";
            }

            $twigexample->delete();

            $this->logger->info("Record with ID: $id deleted successfully.");
            header('Location: /twigexample');
            exit;
        } catch (\Exception $e) {
            $this->logger->error('Error deleting the record: ' . $e->getMessage());
            return 'Error deleting the record: ' . $e->getMessage();
        }
    }

    public function store()
    {
        try {
            $data = $_POST;

            if (!isset($data['csrf_token']) || !$this->validateCsrfToken($data['csrf_token'])) {
                throw new \Exception('Invalid CSRF token.');
            }

            $data = Sanitizer::sanitizeInput($data);

            if (!isset($data['password']) || empty($data['password'])) {
                throw new \Exception('The "password" field is required.');
            }

            $data['password'] = password_hash($data['password'], PASSWORD_BCRYPT);

            TwigExample::create($data);

            header('Location: /twigexample');
            exit;
        } catch (\Exception $e) {
            if ($e->getCode() == 23000) { // Error code for duplicate
                $this->logger->error('Error creating record: Duplicate email.');
                return $this->blade->run('twigexample.create', ['error' => 'This email already exists.']);
            } else {
                $this->logger->error('Error creating record: ' . $e->getMessage());
                echo 'Error creating record: ' . $e->getMessage();
            }
        }
    }

    public function update(Request $request, $id)
    {
        try {
            $data = $_POST;

            if (!isset($data['csrf_token']) || !$this->validateCsrfToken($data['csrf_token'])) {
                throw new \Exception('Invalid CSRF token.');
            }

            $data = Sanitizer::sanitizeInput($data);

            $twigexample = TwigExample::find($id);

            if (!$twigexample) {
                $this->logger->warning("Record with ID $id not found.");
                return "Record with ID $id not found.";
            }

            $twigexample->fill($data);
            $twigexample->save();

            $this->logger->info("Record with ID: $id updated successfully.");
            header('Location: /twigexample');
        } catch (\Exception $e) {
            $this->logger->error('Error updating the record: ' . $e->getMessage());
            return 'Error updating the record: ' . $e->getMessage();
        }
    }
}