//Middleware
export async function middleware(req: NextRequest) {
  const accessToken = req.cookies.get("accessToken")?.value;
  const refreshToken = req.cookies.get("refreshToken")?.value;
  if (!accessToken || isTokenExpired(accessToken as string)) {
    if (refreshToken) {
      try {
        const response = await fetch(
          `${process.env.EXTERNAL_API}/auth/refresh-token`,
          {
            method: "POST",
            headers: new Headers(req.headers),
          }
        );
        if (!response.ok) {
          console.error("Failed to refresh access token");
          return new Response("Failed to refresh access token", {
            status: 500,
          });
        }
        const newAccessToken =
          (response.headers.get("Authorization") as string) || "";
        console.log("New accessToken obtained: ", newAccessToken);
        const res = NextResponse.next();
        res.cookies.set({
          name: "accessToken",
          sameSite: "strict",
          path: "/",
          value: newAccessToken,
          secure: process.env.NODE_ENV === "production",
        });
        return res;
      } catch (error) {
        if (error instanceof Response && error.status === 429) {
          console.error("Rate-limited:", error.statusText);
          return new Response("Rate limited: Too many requests", {
            status: 429,
          });
        } else {
          return new Response("Failed to refresh access token", {
            status: 500,
          });
        }
      }
    } else {
      // If refresh token is missing, return an error or handle it appropriately
      return NextResponse.redirect(new URL("/login", req.url));
      // return new Response("Refresh token is missing", { status: 401 });
    }
  }
  // If access token is valid, allow the request to proceed without modification
  return NextResponse.next();
}

//Not middleware
export async function login(formData: FormData) {
  // console.log(formData);
  const response = await fetch(`${process.env.EXTERNAL_API}/login`, {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
    },
    body: JSON.stringify(Object.fromEntries([...formData])),
  });
  if (!response.ok) {
    console.error("Error");
    throw new Error("Failed to sign in: ", response as any);
  }
  const accessToken = response.headers.get("Authorization") ?? "";
  const tokenParts = accessToken.split(" ");
  const strippedAccessToken = tokenParts.length === 2 ? tokenParts[1] : "";
  console.log("INITIAL ACCESSTOKEN: ", strippedAccessToken);
  cookies().set("accessToken", strippedAccessToken, {
    path: "/",
    sameSite: "strict",
    secure: process.env.NODE_ENV === "production",
  });
  const cookiesHeader = response.headers.get("set-cookie");
  if (cookiesHeader) {
    // Parse cookies
    const cookiesArray = cookiesHeader.split("; ");
    const refreshTokenCookie = cookiesArray.find((cookie) =>
      cookie.startsWith("refreshToken=")
    );
    if (refreshTokenCookie) {
      let refreshToken = refreshTokenCookie.split("=")[1];
      cookies().set("refreshToken", refreshToken, {
        path: "/",
        sameSite: "strict",
        httpOnly: true,
        secure: process.env.NODE_ENV === "production",
      });
      console.log("User signed in: ", Object.fromEntries([...formData]).email);
    }
  }
}