# frozen_string_literal: true

class SessionsController < ApplicationController
  layout "auth"
  skip_before_action :authenticate_user!, only: %i[new create create_from_oauth]

  def create
    @user = User.where(email: user_params[:email]).first
    if @user&.authenticate(user_params[:password])
      set_current_user(@user, user_params[:remember_me])
      audit! :login, @user
      if params["chrome-callback"].present?
        redirect_to params["chrome-callback"] + "?extension-token=#{@user.extension_token}"
      else
        redirect_to root_path
      end
    else
      flash.now[:error] = t("email_or_password_is_wrong")
      render "new"
    end
  end

  def destroy
    cookies[:remember_token_v2] = {
      value: nil
    }
    redirect_to root_path
  end

  def new
    @user = User.new
  end

  def create_from_oauth
    if request.env["omniauth.auth"]["info"]["email"].split("@").last != "pingcap.com"
      flash[:error] = t("only_pingcap_email")
      redirect_to new_session_path
      return
    end
    @user = User.find_or_create_from_auth(request.env["omniauth.auth"])
    if @user
      set_current_user(@user)
      audit! :login, @user
      flash[:success] = t("login_successed")
      redirect_to root_path
    else
      flash[:error] = t("login_failed")
      redirect_to root_path
    end
  end

  def user_params
    params.require(:user).permit(:email, :password, :remember_me)
  end
end