<?php

use Paymenter\Extensions\Servers\Proxmox\Http\Controllers\ServerIconController;
use Paymenter\Extensions\Servers\Proxmox\Http\Controllers\ServerTagController;
use App\Http\Controllers\SocialLoginController;
use App\Http\Middleware\MustVerfiyEmail;
use App\Livewire\Auth;
use App\Livewire\Cart;
use App\Livewire\Client;
use App\Livewire\Dashboard;
use App\Livewire\Home;
use App\Livewire\Invoices;
use App\Livewire\Products;
use App\Livewire\Services;
use App\Livewire\Tickets;
use Illuminate\Foundation\Auth\EmailVerificationRequest;
use Illuminate\Support\Facades\Route;

// Server icon/tag API (AJAX, not Livewire)
Route::middleware(['web', 'auth'])->group(function () {
    Route::get('/proxmox/server/{server}/icon', [ServerIconController::class, 'show']);
    Route::post('/proxmox/server/{server}/icon', [ServerIconController::class, 'update']);
    Route::get('/api/proxmox/tags/{server}', [ServerTagController::class, 'show']);
    Route::post('/api/proxmox/tags/{server}', [ServerTagController::class, 'update']);
    Route::get('/proxmox/tags/colors', [ServerTagController::class, 'colors']);
});

Route::get('/', Home::class)->name('home');

// Destroy the session and log out the user.
// auth()->logout();
// Authorization routes
Route::group(['middleware' => ['web', 'guest']], function () {
    Route::get('/login', Auth\Login::class)->name('login');
    Route::get('/2fa', Auth\Tfa::class)->name('2fa');
    Route::get('/register', Auth\Register::class)->name('register');
    // Todo
    Route::get('/password/request', Auth\Password\Request::class)->name('password.request');
    Route::get('/password/reset/{token}', Auth\Password\Reset::class)->name('password.reset');

    Route::get('/oauth/{provider}', [SocialLoginController::class, 'redirect'])->name('oauth.redirect');
    Route::get('/oauth/{provider}/callback', [SocialLoginController::class, 'handle'])->name('oauth.handle');
});

Route::group(['middleware' => ['web', 'auth', MustVerfiyEmail::class]], function () {
    Route::get('/dashboard', Dashboard::class)->name('dashboard');

    Route::get('/invoices', Invoices\Index::class)->name('invoices');
    Route::get('/invoices/{invoice:number}', Invoices\Show::class)->name('invoices.show')->middleware('can:view,invoice');

    Route::get('/tickets', Tickets\Index::class)->name('tickets');
    Route::get('/tickets/create', Tickets\Create::class)->name('tickets.create');
    Route::get('/tickets/{ticket}', Tickets\Show::class)->name('tickets.show')->middleware('can:view,ticket');

    Route::get('/services', Services\Index::class)->name('services');
    Route::get('/services/{service}', Services\Show::class)->name('services.show')->middleware('can:view,service');
    Route::get('/services/{service}/upgrade', Services\Upgrade::class)->name('services.upgrade')->middleware('can:view,service');
});

Route::group(['middleware' => ['web', 'auth']], function () {
    Route::get('account', Client\Account::class)->name('account');
    Route::get('account/security', Client\Security::class)->name('account.security');
    Route::get('account/credits', Client\Credits::class)->name('account.credits');

    Route::get('/email/verify', Auth\VerifyEmail::class)->name('verification.notice');
    Route::get('/email/verify/{id}/{hash}', function (EmailVerificationRequest $request) {
        $request->fulfill();

        return redirect()->route('dashboard');
    })->middleware(['signed'])->name('verification.verify');
});

Route::get('cart', Cart::class)->name('cart');

// Serve storage files if symlink doesn't work or web server doesn't serve them directly
// This route only handles requests that reach Laravel (if .htaccess doesn't serve them)
Route::get('/storage/{path}', function ($path) {
    // Sanitize the path to prevent directory traversal
    $path = str_replace('..', '', $path);
    $path = ltrim($path, '/');
    
    $filePath = storage_path('app/public/' . $path);
    
    // Ensure the file exists and is within the public storage directory
    if (!file_exists($filePath) || !is_file($filePath)) {
        abort(404, 'File not found');
    }
    
    // Verify the file is actually within the storage/app/public directory
    $realPath = realpath($filePath);
    $publicPath = realpath(storage_path('app/public'));
    
    if (!$realPath || strpos($realPath, $publicPath) !== 0) {
        abort(403, 'Access denied');
    }
    
    $mimeType = mime_content_type($filePath) ?: 'application/octet-stream';
    
    return response()->file($filePath, [
        'Content-Type' => $mimeType,
        'Cache-Control' => 'public, max-age=31536000',
    ]);
})->where('path', '.*')->name('storage.serve');

Route::group(['prefix' => 'products'], function () {
    Route::get('/{category:slug}', Products\Index::class)->name('category.show')/* ->where('category', '[A-Za-z0-9_/-]+') */;
    Route::get('/{category:slug}/{product:slug}', Products\Show::class)->name('products.show')/* ->where('category', '[A-Za-z0-9_/-]+') */;
    Route::get('/{category:slug}/{product:slug}/checkout', Products\Checkout::class)->name('products.checkout')/* ->where('category', '[A-Za-z0-9_/-]+') */;
    // Allow for nested categories
});

Route::group([
    'as' => 'passport.',
    'prefix' => config('passport.path', 'oauth'),
    'namespace' => '\Laravel\Passport\Http\Controllers',
], function () {
    Route::get('/oauth/authorize', [
        'uses' => 'Laravel\Passport\Http\Controllers\AuthorizationController@authorize',
        'as' => 'x.authorize',
        'middleware' => 'web',
    ]);
});