use crate::db::get_client;
use crate::errors::AppError;

use serde::{Deserialize, Serialize};
use sqlx::Row;
use validator::Validate;

/// User model
#[derive(Deserialize, Serialize, Validate, sqlx::FromRow)]
pub struct User {
    id: i32,
    name: String,
    #[validate(length(min = 4, message = "Can not be empty"))]
    email: String,
    #[validate(length(min = 2, message = "Can not be empty"))]
    username: String,
    #[validate(length(min = 8, message = "Must be min 8 chars length"))]
    password: String,
    is_staff: Option<bool>,
    avatar: Option<String>,
}

/// Response used to print a user (or a users list)
#[derive(Deserialize, Serialize, Validate, sqlx::FromRow)]
pub struct UserList {
    // It is public because it used by `Claims` creation
    pub id: i32,
    pub name: String,
    #[validate(length(min = 4, message = "Can not be empty"))]
    pub email: String,
    #[validate(length(min = 2, message = "Can not be empty"))]
    pub username: String,
    pub is_staff: Option<bool>,
    pub avatar: Option<String>,
}

impl User {
    /// By default an user has id = 0. It is not created yet
    pub fn new(name: String, email: String, username: String, password: String) -> Self {
        Self {
            id: 0,
            name,
            email,
            username,
            password,
            is_staff: Some(false),
            avatar: None,
        }
    }

    /// Create a new user from the model using a SHA256 crypted password
    pub async fn create(user: User) -> Result<UserList, AppError> {
        let pool = unsafe { get_client() };

        user.validate()
            .map_err(|error| AppError::BadRequest(error.to_string()))?;

        let crypted_password = sha256::digest(user.password);

        let rec: UserList = sqlx::query_as(
            r#"
                INSERT INTO users (name, email, username, password)
                VALUES ( $1, $2, $3, $4)
                RETURNING id, name, email, username, is_staff, avatar
            "#,
        )
        .bind(user.name)
        .bind(user.email)
        .bind(user.username)
        .bind(crypted_password)
        .fetch_one(pool)
        .await?;

        Ok(rec)
    }

    /// Find a user using the model. It used for login
    pub async fn find(user: User) -> Result<UserList, AppError> {
        let pool = unsafe { get_client() };

        let crypted_password = sha256::digest(user.password);

        let rec: UserList = sqlx::query_as(
            r#"
                SELECT id, name, email, username, is_staff, avatar FROM "users"
                WHERE username = $1 AND password = $2
            "#,
        )
        .bind(user.username)
        .bind(crypted_password)
        .fetch_one(pool)
        .await?;

        Ok(rec)
    }

    /// Returns the user with id = `user_id`
    pub async fn find_by_id(user_id: i32) -> Result<UserList, AppError> {
        let pool = unsafe { get_client() };

        let rec: UserList = sqlx::query_as(
            r#"
                SELECT id, name, email, username, is_staff, avatar FROM "users"
                WHERE id = $1
            "#,
        )
        .bind(user_id)
        .fetch_one(pool)
        .await?;

        Ok(rec)
    }

    /// List all users
    pub async fn list() -> Result<Vec<UserList>, AppError> {
        let pool = unsafe { get_client() };
        let rows: Vec<UserList> = sqlx::query_as(
            r#"SELECT id, name, email, username, is_staff, avatar FROM users
            ORDER BY id DESC
            LIMIT $1 OFFSET $2
            "#,
        )
        .fetch_all(pool)
        .await?;

        Ok(rows)
    }

    /// Prevent the "uniquess" Postgres fields check. Check if username has been taken
    pub async fn username_has_taken(username: &String) -> Result<bool, AppError> {
        let pool = unsafe { get_client() };
        let cursor = sqlx::query(
            r#"
                SELECT COUNT(id) as count FROM users WHERE username = $1
            "#,
        )
        .bind(username)
        .fetch_one(pool)
        .await?;

        let count: i64 = cursor.try_get(0).unwrap();

        Ok(count > 0)
    }

    /// Prevent the "uniquess" Postgres fields check. Check if email has been taken
    pub async fn email_has_taken(email: &String) -> Result<bool, AppError> {
        let pool = unsafe { get_client() };
        let cursor = sqlx::query(
            r#"
                SELECT COUNT(id) as count FROM users WHERE email = $1
            "#,
        )
        .bind(email)
        .fetch_one(pool)
        .await?;

        let count: i64 = cursor.try_get(0).unwrap();

        Ok(count > 0)
    }
}