<?php

namespace ThemePaste\SecureAdmin\Classes;

use ThemePaste\SecureAdmin\Classes\APIs\BlockUsersController;
use ThemePaste\SecureAdmin\Classes\APIs\FailedLoginsController;
use ThemePaste\SecureAdmin\Classes\APIs\MonitorController;
use ThemePaste\SecureAdmin\Classes\APIs\Reports;
use ThemePaste\SecureAdmin\Classes\APIs\SuccessLoginsController;
use ThemePaste\SecureAdmin\Classes\APIs\TwoFAByAppUsers;

class RestApi {

    /**
     * Private constructor to prevent direct instantiation.
     */
    public function __construct() {
        add_action( 'rest_api_init', [$this, 'register_routes'] );
    }

    /**
     * Registers the REST API routes.
     */
    public function register_routes() {

        register_rest_route(
            'secure-admin/v1',
            '/success-logins',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) {
                    return SuccessLoginsController::get()->get_data( $request );
                },
                'permission_callback' => function ( $request ) {
                    return SuccessLoginsController::get()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/failed-logins',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) {
                    return FailedLoginsController::get()->get_data( $request );
                },
                'permission_callback' => function ( $request ) {
                    return FailedLoginsController::get()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/block-users',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) {
                    return BlockUsersController::get()->get_data( $request );
                },
                'permission_callback' => function ( $request ) {
                    return BlockUsersController::get()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/dashboard/limit-login-attempts',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) {
                    return Reports::get()->get_data( $request );
                },
                'permission_callback' => function ( $request ) {
                    return Reports::get()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/failed-logins/count',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) {
                    return FailedLoginsController::get()->get_count( $request );
                },
                'permission_callback' => function ( $request ) {
                    return FailedLoginsController::get()->authorize_request( $request );
                },
            ]
        );

        // --- Monitoring: counters, actions and export -----------------------
        $monitor = function () {
            return MonitorController::get();
        };

        register_rest_route(
            'secure-admin/v1',
            '/monitor/summary',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->get_summary( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/monitor/block',
            [
                'methods'             => 'POST',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->block_ip( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
                'args'                => [
                    'ip' => [
                        'required'          => true,
                        'sanitize_callback' => 'sanitize_text_field',
                    ],
                ],
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/monitor/unblock',
            [
                'methods'             => 'POST',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->unblock_ip( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
                'args'                => [
                    'ip' => [
                        'required'          => true,
                        'sanitize_callback' => 'sanitize_text_field',
                    ],
                ],
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/monitor/threats',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->get_threats( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/monitor/threats/clear',
            [
                'methods'             => 'POST',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->clear_threats( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/monitor/purge',
            [
                'methods'             => 'POST',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->purge_log( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
                'args'                => [
                    'type'       => ['required' => true, 'sanitize_callback' => 'sanitize_key'],
                    'older_than' => ['sanitize_callback' => 'sanitize_key'],
                    'from'       => ['sanitize_callback' => 'sanitize_text_field'],
                    'to'         => ['sanitize_callback' => 'sanitize_text_field'],
                ],
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/monitor/export',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) use ( $monitor ) {
                    return $monitor()->export_csv( $request );
                },
                'permission_callback' => function ( $request ) use ( $monitor ) {
                    return $monitor()->authorize_request( $request );
                },
                'args'                => [
                    'type' => [
                        'required'          => true,
                        'sanitize_callback' => 'sanitize_key',
                    ],
                ],
            ]
        );

        register_rest_route(
            'secure-admin/v1',
            '/2fa/app/users',
            [
                'methods'             => 'GET',
                'callback'            => function ( $request ) {
                    return TwoFAByAppUsers::get()->get_data( $request );
                },
                'permission_callback' => function ( $request ) {
                    return TwoFAByAppUsers::get()->authorize_request( $request );
                },
                'args'                => [
                    'per_page' => [
                        'default'           => 10,
                        'sanitize_callback' => 'absint',
                    ],
                    'page'     => [
                        'default'           => 1,
                        'sanitize_callback' => 'absint',
                    ],
                    's'        => [
                        'default'           => '',
                        'sanitize_callback' => 'sanitize_text_field',
                    ],
                    'role'     => [
                        'default'           => '',
                        'sanitize_callback' => 'sanitize_text_field',
                    ],
                ],
            ]
        );

    }
}