<?php

namespace App\Http\Controllers\Auth;

use App\AuditTrail;
use App\Http\Controllers\Controller;
use App\User;
//use Illuminate\Foundation\Auth\AuthenticatesUsers;
use Illuminate\Http\Request;
use Illuminate\Support\Carbon;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Lang;
use Illuminate\Validation\ValidationException;

class LoginController extends Controller
{
//    use AuthenticatesUsers;

    public function getLogin() {
        return view('admin.auth.login');
    }

    public function postLogin(Request $request) {
        //validate request
        try {
            $this->validate($request, [
                'login' => 'required',
                'password' => 'required'
            ]);
        } catch (ValidationException $e) {
        }

        // get our login input
        $login = $request->input('login');

        // check login field
        $login_type = filter_var( $login, FILTER_VALIDATE_EMAIL ) ? 'email' : 'username';

        // merge our login field into the request with either email or username as key
        $request->merge([ $login_type => $login ]);

        $credentials = $request->only($login_type, 'password');

        //check the user trying to login
        if (isset($credentials['username']) && !empty($credentials['username']))
            $user = User::query()->where([
                ['username', '=', $credentials['username']]
            ])->first();
        else
            $user = User::query()->where([
                ['email', '=', $credentials['email']]
            ])->first();

        if (!empty($user) && $user->is_locked) {
            //process locked user
            $request->session()->put('locked_user_id', $user->id);
            return view('locked');
        }

        if (Auth::attempt($credentials))
        {
            $user = Auth::user();
            $user->last_login_date = Carbon::now();
            if (
                empty($user->wrong_password_attempt_count) ||
                $user->wrong_password_attempt_count > 0
            ) {
                $user->wrong_password_attempt_count = 0;
            }
            $user->save();


            AuditTrail::query()->create([
                'user_id' => $user->id,
                'username' => $user->username,
                'date' => Carbon::now()->toDateTimeString(),
                'activity' => $user->username.' logged in '
            ]);


            if ($user->must_change_password) {
                return redirect()->intended('dashboard');
            } else {
//                return redirect()->route('dashboard.index');
                return redirect()->intended('dashboard');

            }
        } else {
            if (!empty($user)) {
                if (empty($user->wrong_password_attempt_count)) {
                    $user->wrong_password_attempt_count = 0;
                }
                $user->wrong_password_attempt_count++;
                //lock user password after 21 trial
                if ($user->wrong_password_attempt_count >= 30) {
                    $user->is_locked = true;
                }
                $user->save();
            }

            $error  = 'Invalid credentials';
            return view('admin.auth.login',compact('error'));

        }
    }


    public function logout(Request $request)
    {

        $_user = auth()->user();


        AuditTrail::query()->create([
            'user_id' => $_user->id,
            'username' => $_user->username,
            'date' => \Carbon\Carbon::now()->toDateTimeString(),
            'activity' => $_user->username.' logged out '
        ]);

        auth()->logout();
        session()->flush();
        session()->invalidate();
        return redirect()->route('login');
    }
}