<?php

/**
 * Vvveb
 *
 * Copyright (C) 2022  Ziadin Givan
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 */

namespace Vvveb\Controller\User;

use function Vvveb\__;
use function Vvveb\sanitizeHTML;
use Vvveb\Sql\UserSQL;
use Vvveb\System\User\User;
use Vvveb\System\Validator;

/**
 * User profile controller — view, edit, delete profile and download user data.
 */
class Profile extends Base {
	/**
	 * Export the current user's data as an XML download.
	 *
	 * @return never
	 */
	public function download(): never {
		header('Content-Disposition: attachment; filename=user.xml');
		header('Content-Type: application/octet-stream');

		$data = User::get(['user_id' => $this->global['user_id']]);

		if (! $data) {
			die(__('User not found!'));
		}

		unset($data['password']);
		$xml = new \SimpleXMLElement('<root/>');
		array_walk_recursive($data, function ($value, $key) use ($xml) {
			$xml->addChild($key, $value);
		});
		echo $xml->asXML();

		die();
	}

	/**
	 * Request account deletion (sets status to 3) and log out.
	 *
	 * @return void
	 */
	public function delete(): void {
		//status set to 3 = request delete
		$result = User::update(['status' => 3], ['user_id' => $this->global['user_id']]);

		if (! $result) {
			$userModel          = new UserSQL();
			$this->view->errors = [$userModel->error];
		} else {
			User::logout();
			$message               =  __('Account deletion request submitted!');
			$this->session->set('success', ['login' => $message]);
			$this->view->success[] = $message;
			$this->redirect('/user/login');
		}
	}

	/**
	 * Save profile changes submitted via the profile edit form.
	 *
	 * @return void
	 */
	public function save(): void {
		$validator    = new Validator(['user']);

		if (isset($this->request->post['user'])) {
			if (($errors = $validator->validate($this->request->post['user'])) === true) {
				$user            = $this->request->post['user'];
				$user['user_id'] = $this->global['user_id'];
				$user['bio']     = sanitizeHTML($user['bio'] ?? '');
				unset($user['username'], $user['status'], $user['user'], $user['token'], $user['created_at']);

				$result = User::update($user, ['user_id' => $this->global['user_id']]);

				if (! $result) {
					$userModel          = new UserSQL();
					$this->view->errors = [$userModel->error];
				} else {
					$message               =  __('Profile saved!');
					$this->view->success[] = $message;
				}
			} else {
				$this->view->errors = $errors;
			}
		}

		$this->index();
	}

	/**
	 * Display the current user's profile.
	 *
	 * @return void
	 */
	public function index(): void {
		$user = User::get(['user_id' => $this->global['user_id']]);
		unset($user['password']);

		$this->view->user = $user;
	}
}
