<?php

namespace App\Providers;

use App\Enums\Users\RoleEnum;
use App\Models\Service;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\ModelNotFoundException;
use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Gate;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * Register any authentication / authorization services.
     *
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();

        Gate::define('isConceptor', function (Model $authModel) {
            return isset($authModel->role) && $authModel->role === RoleEnum::conceptor;
        });

        Auth::viaRequest('api-hmac', function (Request $request) {
            $service = null;

            try {
                // * On récupère le service actuel correspondant au token fourni.
                $service = Service::query()->where('bearer_token', $request->input('bearer_token'))->firstOrFail();
            } catch (ModelNotFoundException $e) {
                return null;
            }

            // * On authenticate la request en vérifiant sa signature.
            if ($service->authenticateApi($request)) {
                return $service;
            }

            return null;
        });
    }
}