import Fastify from 'fastify';
import cors from '@fastify/cors';
import jwt from '@fastify/jwt';
import { PORT, JWT_SECRET } from './src/config/constants.js';
import { connectDB } from './src/config/db.js';
import routes from './src/routes/v1.js';
import { User } from './src/models/User.js';

const fastify = Fastify({ logger: true });

await connectDB();

const allowedOrigins = [
	process.env.SERVER_EXT_ACCESS,
	process.env.SERVER_INT_ACCESS,
	'capacitor://localhost',
];

await fastify.register(cors, {
	origin: allowedOrigins,
	methods: ['GET', 'POST', 'PUT', 'DELETE'],
	credentials: true
});

await fastify.register(jwt, {
	secret: process.env.JWT_SECRET
});

fastify.decorate('authenticate', async function (req, reply) {
	try {
		const payload = await req.jwtVerify();

		const user = await User.findById(payload.userId);

		if (!user) {
			reply.code(401).send({ message: 'User not found', code: 'INVALID_USER' });
			return;
		}

		if (payload.version !== user.tokenVersion) {
			reply.code(401).send({ message: 'Session invalid', code: 'INVALID_SESSION' });
			return;
		}
		if (payload.version !== user.tokenVersion) {
			throw new Error('Session invalid');
		}

		req.user = user;

	} catch (err) {
		reply.code(401).send(err);
	}
});

await fastify.register(routes);

const start = async () => {
	try {
		await fastify.listen({ port: PORT, host: '0.0.0.0' });
	} catch (err) {
		fastify.log.error(err);
		process.exit(1);
	}
};
start();