<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Password;

class PasswordResetController extends Controller
{
    public function showLinkRequestForm()
    {
        return view('auth.lupa-katalaluan');
    }

    public function sendResetLink(Request $request)
    {
        $request->validate(['email' => ['required', 'email']]);

        $status = Password::sendResetLink($request->only('email'));

        return $status === Password::RESET_LINK_SENT
            ? back()->with('status', 'Pautan set semula kata laluan telah dihantar ke e-mel anda.')
            : back()->withErrors(['email' => $this->mesejRalat($status)]);
    }

    public function showResetForm(Request $request, string $token)
    {
        return view('auth.set-kata-laluan', [
            'token' => $token,
            'email' => $request->query('email', ''),
        ]);
    }

    public function reset(Request $request)
    {
        $data = $request->validate([
            'token' => ['required', 'string'],
            'email' => ['required', 'email'],
            'password' => ['required', 'string', 'min:8', 'confirmed'],
        ], [
            'password.min' => 'Kata laluan perlu sekurang-kurangnya 8 aksara.',
            'password.confirmed' => 'Pengesahan kata laluan tidak sepadan.',
        ]);

        $status = Password::reset(
            $data,
            function ($user, $password) {
                $user->forceFill(['password' => Hash::make($password)])->save();
            }
        );

        return $status === Password::PASSWORD_RESET
            ? redirect()->route('login')->with('status', 'Kata laluan berjaya ditetapkan semula. Sila log masuk.')
            : back()->withErrors(['email' => $this->mesejRalat($status)])->onlyInput('email');
    }

    private function mesejRalat(string $status): string
    {
        return match ($status) {
            Password::INVALID_USER => 'Akaun dengan e-mel ini tidak ditemui.',
            Password::RESET_THROTTLED => 'Sila tunggu sebentar sebelum cuba lagi.',
            Password::INVALID_TOKEN => 'Pautan set semula tidak sah atau telah tamat tempoh.',
            default => 'Gagal memproses permintaan. Sila cuba lagi.',
        };
    }
}