<?php
namespace api\controllers;

use Yii;
use yii\rest\Controller;
use api\models\LoginForm;
use yii\filters\VerbFilter;
use yii\filters\AccessControl;
use yii\filters\ContentNegotiator;
use yii\web\Response;
use yii\filters\Cors;
use yii\helpers\Json;
use common\models\Token;
use api\models\UserForm;



class SiteController extends Controller
{
    public $enableCsrfValidation = false;
    public function actionIndex()
    {
       return 'api';
    }
    public function behaviors()
    {

        $behaviors = parent::behaviors();
        $behaviors['corsFilter'] = [
            'class' => \yii\filters\Cors::className(),
            'cors' => [
                'Origin' => ['*'],
                'Access-Control-Request-Method' => ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'],
                'Access-Control-Allow-Credentials' => false,
            ],

        ];
        return $behaviors;
    }
    public function actionLogin()
    {
        $params = json_decode(Yii::$app->getRequest()->getRawBody());
        $model = new LoginForm();
        $model->attributes=$params;
        if ($token = $model->auth()) {
            return [
                'token' => $token->token,
            ];
        } else {
            return $model;
        }
    }
    public function actionCreate()
    {
        $params = json_decode(Yii::$app->getRequest()->getRawBody());
        $model = new UserForm();
        $model->attributes = $params;
        if ($model->validate() && $model->save()){

            $response = Yii::$app->getResponse();
            $response->setStatusCode(201);
            $id = implode(',', array_values($model->getPrimaryKey(true)));
            $response->getHeaders()->set('Location',Url::toRoute(['view', 'id' => $id],true));
        } elseif (!$model->hasErrors()) {
            throw new ServerErrorHttpException('Проверет правильность внесенных данных');
        }
        return $model;
    }
}