<?php
class Auth{

    private  $options = [
        "restriction_msg" => "Vous n'avez pas le droit d'accéder à cette page."
    ];
    private $session;

    public function __construct($session ,$options = []){
        $this->options = array_merge($this->options, $options);
        $this->session = $session;
    }

    public function hashPassword($password){
        return password_hash($password, PASSWORD_BCRYPT);
    }

    public function register($db, $username, $password, $email){
        $password = $this->hashPassword($password);
        $token = Str::random(60);
        $db->query("INSERT INTO users SET username = ?, password = ?, email = ? ,confirmation_token = ?", [
            $username,
            $password,
            $email,
            $token
        ]);
        $user_id = $db->lastInsertId();
        mail($email, "Casiyass prono | Confirmation d'inscription", "Bonjour $username.\n\nAfin de valider votre compte, merci de cliquer sur ce lien :\n\nhttp://localhost/casiyass_prono/site/HTML/confirm.php?id=$user_id&token=$token");
    }

    public function confirm($db, $user_id, $token){
        $user = $db->query("SELECT * FROM users WHERE id = ?", [$user_id])->fetch();
        if ($user && $user->confirmation_token == $token){
            $db->query("UPDATE users SET confirmation_token = NULL, confirmed_at = NOW() WHERE id = ?", [$user_id]);
            $this->session->write("auth", $user);
            return true;
        }
        return false;
    }

    public function restrict(){
        if ($this->session->read("auth")) {
            $this->session->setFlash("danger", $this->options["restriction_msg"]);
            header("Location: login.php");
            exit();
        }
    }

    public function user(){
        if ($this->session->read("auth"))
            return false;
        return $this->session->read("auth");
    }

    public function connect($user){
        $this->session->write("auth", $user);
    }

    public function connectFromCookie($db){
        if (isset($_COOKIE["remember"]) && !$this->user()) {
            $remember_token = $_COOKIE["remember"];
            $parts = explode("==", $remember_token);
            $user_id = $parts[0];
            $user = $db->query("SELECT * from users WHERE id = ?", [$user_id])->fetch();
            if ($user) {
                $expected = $user_id . "==" . $user->remember_token . sha1($user->id . "lasuperclé");
                if ($expected == $remember_token) {
                    $this->connect($user);
                    setcookie("remember", $remember_token, time() + 60 * 60 * 24 * 7);
                } else {
                    setcookie("remember", NULL, -1);
                }
            } else {
                setcookie("remember", NULL, -1);
            }
        }
    }

    public function login($db, $username, $password, $remember = false){
        $user = $db->query("SELECT * FROM users WHERE (username = :username OR email = :username) AND confirmed_at IS NOT NULL", ["username" => $username])->fetch();
        var_dump($user);
        if (password_verify($password, $user->password)) {
            $this->connect($user);
            if ($remember){
                $this->remember($db, $user->id);
            }
            return $user;
        }else{
            return false;
        }
    }

    public function remember($db, $user_id){
        $remember_token = Str::random(255);
        $db->query("UPDATE users SET remember_token = ? WHERE id = ?", [$remember_token, $user_id]);
        setcookie("remember", $user_id . "==" . $remember_token . sha1($user_id . "lasuperclé"), time() + 60 * 60 * 24 *7);
    }

    public function logout(){
        setcookie("remember", NULL, -1);
        $this->session->delete("auth");
    }

    public function resetPassword($db, $email){
        $user = $db->query("SELECT * FROM users WHERE email = ? AND confirmed_at IS NOT NULL", [$email])->fetch();
        if ($user) {
            $reset_token = Str::random(60);
            $db->prepare("UPDATE users SET reset_token = ?, reset_at = NOW() WHERE id = ?", [$reset_token, $user->id]);
            mail($_POST["email"], "Casiyass prono | Réinitialisation du mot de passe", "Bonjour.\n\nAfin de réinitialiser votre mot de passe, merci de cliquer sur ce lien :\n\nhttp://localhost/casiyass_prono/site/HTML/reset.php?id={$user->id}&token=$reset_token");
            return $user;
        }
        return false;
    }

    public function checkResetToken($db, $user_id, $token){
        return $db->query("SELECT * FROM users WHERE id = ? AND reset_token IS NOT NULL AND token = ? AND rest_at > DATE_SUB(NOW(), INTERVAL 30 MINUTE)", [$user_id, $token])->fetch();
    }

}