imphnen-backend-service/src/apps/v1/auth/auth_service.rs

use super::{
	AuthLoginRequestDto, AuthLoginResponsetDto, AuthNewPasswordRequestDto,
	AuthRegisterRequestDto, AuthRepository, AuthResendOtpRequestDto,
	AuthVerifyEmailRequestDto, TokenDto,
};
use crate::{
	common_response, encode_access_token, encode_refresh_token, extract_email_token,
	generate_otp, get_iso_date, hash_password, send_email, success_response,
	validate_request, verify_password, AppState, Env, ResourceEnum,
	ResponseSuccessDto, UsersActiveInactiveSchema, UsersItemDto, UsersRepository,
	UsersSchema,
};
use axum::{http::StatusCode, response::Response};
use surrealdb::{
	sql::{Id, Thing},
	Uuid,
};

pub struct AuthService;

impl AuthService {
	pub async fn mutation_login(
		payload: AuthLoginRequestDto,
		state: &AppState,
	) -> Response {
		if let Err((status, message)) = validate_request(&payload) {
			return common_response(status, &message);
		}

		let user_repo = UsersRepository::new(state);
		let auth_repo = AuthRepository::new(state);

		match user_repo.query_user_by_email(payload.email.clone()).await {
			Ok(user) => {
				let is_password_correct =
					verify_password(&payload.password, &user.password).unwrap_or(false);

				if !is_password_correct {
					return common_response(
						StatusCode::BAD_REQUEST,
						"Email or password not correct",
					);
				}

				if !user.is_active {
					return common_response(
						StatusCode::BAD_REQUEST,
						"Account not active, please verify your email",
					);
				}

				let access_token = match encode_access_token(payload.email.clone()) {
					Ok(token) => token,
					Err(_) => {
						return common_response(
							StatusCode::INTERNAL_SERVER_ERROR,
							"Failed to generate access token",
						)
					}
				};

				let refresh_token = match encode_refresh_token(payload.email.clone()) {
					Ok(token) => token,
					Err(_) => {
						return common_response(
							StatusCode::INTERNAL_SERVER_ERROR,
							"Failed to generate refresh token",
						)
					}
				};

				let response = ResponseSuccessDto {
					data: AuthLoginResponsetDto {
						user: UsersItemDto {
							fullname: user.fullname.clone(),
							email: user.email.clone(),
							is_active: user.is_active,
						},
						token: TokenDto {
							access_token,
							refresh_token,
						},
					},
				};

				if let Err(_) = auth_repo.query_store_user(user).await {
					return common_response(StatusCode::BAD_REQUEST, "Failed to store data");
				}

				success_response(response)
			}
			Err(err) => common_response(StatusCode::UNAUTHORIZED, &err.to_string()),
		}
	}

	pub async fn mutation_register(
		payload: AuthRegisterRequestDto,
		state: &AppState,
	) -> Response {
		let user_repo = UsersRepository::new(state);
		let auth_repo = AuthRepository::new(state);

		if user_repo
			.query_user_by_email(payload.email.clone())
			.await
			.is_ok()
		{
			return common_response(StatusCode::BAD_REQUEST, "User already exists");
		}

		let hashed_password = match hash_password(&payload.password) {
			Ok(hash) => hash,
			Err(_) => {
				return common_response(
					StatusCode::INTERNAL_SERVER_ERROR,
					"Failed to hash password",
				);
			}
		};

		let new_user = AuthRegisterRequestDto {
			email: payload.email,
			password: hashed_password,
			fullname: payload.fullname,
			student_type: payload.student_type,
			phone_number: payload.phone_number,
			referral_code: payload.referral_code,
			referred_by: payload.referred_by,
		};

		let otp = generate_otp::OtpManager::generate_otp();

		match auth_repo
			.query_store_otp(new_user.email.clone(), otp.clone())
			.await
		{
			Ok(_) => {
				let message = format!("your otp code is {}", otp);
				if let Err(err) = send_email(&new_user.email, "OTP Verification", &message) {
					return common_response(
						StatusCode::INTERNAL_SERVER_ERROR,
						&err.to_string(),
					);
				}
			}
			Err(err) => {
				return common_response(StatusCode::INTERNAL_SERVER_ERROR, &err.to_string());
			}
		}

		let role_thing = Thing::from((
			ResourceEnum::Roles.to_string(),
			Id::String(Uuid::new_v4().to_string()),
		));

		let user_thing = Thing::from((
			ResourceEnum::Users.to_string(),
			Id::String(Uuid::new_v4().to_string()),
		));

		match user_repo
			.query_create_user(UsersSchema {
				id: user_thing,
				email: new_user.email.clone(),
				fullname: new_user.fullname.clone(),
				password: new_user.password.clone(),
				phone_number: new_user.phone_number.clone(),
				referral_code: new_user.referral_code.clone(),
				referred_by: new_user.referred_by.clone(),
				student_type: new_user.student_type.clone(),
				created_at: Some(get_iso_date()),
				updated_at: Some(get_iso_date()),
				role: role_thing,
				is_active: false,
				is_profile_completed: false,
				..Default::default()
			})
			.await
		{
			Ok(msg) => common_response(StatusCode::CREATED, &msg),
			Err(err) => {
				common_response(StatusCode::INTERNAL_SERVER_ERROR, &err.to_string())
			}
		}
	}

	pub async fn mutation_resend_otp(
		payload: AuthResendOtpRequestDto,
		state: &AppState,
	) -> Response {
		let repository = AuthRepository::new(state);
		let otp = generate_otp::OtpManager::generate_otp();
		let message = format!("Your OTP code is {}", otp);
		match repository.query_store_otp(payload.email.clone(), otp).await {
			Ok(_) => match send_email(&payload.email, "OTP Verification", &message) {
				Ok(_) => common_response(StatusCode::OK, "OTP resent successfully"),
				Err(err) => common_response(StatusCode::BAD_REQUEST, &err.to_string()),
			},
			Err(err) => common_response(StatusCode::BAD_REQUEST, &err.to_string()),
		}
	}

	pub async fn mutation_forgot_password(
		payload: AuthResendOtpRequestDto,
		state: &AppState,
	) -> Response {
		let user_repo = UsersRepository::new(state);
		if user_repo
			.query_user_by_email(payload.email.clone())
			.await
			.is_err()
		{
			return common_response(StatusCode::BAD_REQUEST, "User not found");
		}
		let token = match encode_access_token(payload.email.clone()) {
			Ok(token) => token,
			Err(_) => {
				return common_response(
					StatusCode::INTERNAL_SERVER_ERROR,
					"Failed to generate access token",
				)
			}
		};
		let env = Env::new();
		let fe_url = env.fe_url;
		let message = format!(
                "You have requested a password reset. Please click the link below to continue: {}/auth/reset-password?token={}",
                fe_url, token
            );

		match send_email(&payload.email, "Reset Password Request", &message) {
			Ok(_) => common_response(StatusCode::OK, "Reset Password request send"),
			Err(err) => common_response(StatusCode::BAD_REQUEST, &err.to_string()),
		}
	}

	pub async fn mutation_verify_email(
		payload: AuthVerifyEmailRequestDto,
		state: &AppState,
	) -> Response {
		let user_repo = UsersRepository::new(state);
		let auth_repo = AuthRepository::new(state);

		match auth_repo.query_get_stored_otp(payload.email.clone()).await {
			Ok(stored_otp) => {
				let user_otp = payload.otp;
				let is_otp_valid = stored_otp == user_otp;
				if is_otp_valid {
					match user_repo
						.query_active_inactive_user(
							payload.email.clone(),
							UsersActiveInactiveSchema { is_active: true },
						)
						.await
					{
						Ok(_) => {
							if let Err(e) = auth_repo
								.query_delete_stored_otp(payload.email.clone())
								.await
							{
								return common_response(
									StatusCode::INTERNAL_SERVER_ERROR,
									&e.to_string(),
								);
							}
							common_response(StatusCode::OK, "Email verified successfully")
						}
						Err(err) => common_response(StatusCode::BAD_REQUEST, &err.to_string()),
					}
				} else {
					if let Err(e) = auth_repo
						.query_delete_stored_otp(payload.email.clone())
						.await
					{
						return common_response(
							StatusCode::INTERNAL_SERVER_ERROR,
							&format!("Failed to delete OTP: {}", e),
						);
					}
					common_response(StatusCode::BAD_REQUEST, "Failed to verify OTP")
				}
			}
			Err(err) => common_response(StatusCode::BAD_REQUEST, &err.to_string()),
		}
	}

	pub async fn mutation_new_password(
		payload: AuthNewPasswordRequestDto,
		state: &AppState,
	) -> Response {
		let user_repo = UsersRepository::new(state);
		let email = extract_email_token(payload.token).unwrap();

		match user_repo
			.query_update_password_user(crate::UsersSetNewPasswordSchema {
				email: email.clone(),
				password: payload.password.clone(),
			})
			.await
		{
			Ok(msg) => common_response(StatusCode::OK, &msg),
			Err(err) => common_response(StatusCode::BAD_REQUEST, &err.to_string()),
		}
	}
}