package com.pingcap.community.blogserver.controller;

import com.pingcap.community.blogserver.dto.UploadFileDTO;
import com.pingcap.community.blogserver.entity.User;
import com.pingcap.community.blogserver.service.UploadService;
import com.pingcap.community.blogserver.vo.upload.AuthUploadVO;
import io.swagger.v3.oas.annotations.tags.Tag;
import lombok.AllArgsConstructor;
import lombok.extern.slf4j.Slf4j;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.security.core.annotation.AuthenticationPrincipal;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

@Tag(name = "Upload API")
@Slf4j
@RestController
@AllArgsConstructor
@RequestMapping("/api/upload")
public class UploadController {

  private final UploadService uploadService;

  @PreAuthorize("hasAnyAuthority('UPLOAD_MEDIA')")
  @PostMapping(value = "/image/auth")
  public AuthUploadVO uploadImage(
    @RequestBody UploadFileDTO uploadFileDTO,
    @AuthenticationPrincipal User uploader
  ) {
    return uploadService.uploadImage(uploader, uploadFileDTO);
  }

}