18F/identity-idp

# frozen_string_literal: true

module Redirect
  class ReturnToSpController < Redirect::RedirectController
    before_action :validate_sp_exists

    def cancel
      redirect_url = sp_return_url_resolver.return_to_sp_url
      analytics.return_to_sp_cancelled(redirect_url: redirect_url, **location_params)
      redirect_to(redirect_url, allow_other_host: true)
    end

    def failure_to_proof
      redirect_url = sp_return_url_resolver.failure_to_proof_url

      analytics.return_to_sp_failure_to_proof(redirect_url: redirect_url, **location_params)
      redirect_to(redirect_url, allow_other_host: true)
    end

    private

    def sp_return_url_resolver
      @sp_return_url_resolver ||= SpReturnUrlResolver.new(
        service_provider: current_sp,
        oidc_state: sp_request_params[:state],
        oidc_redirect_uri: sp_request_params[:redirect_uri],
      )
    end

    def sp_request_params
      @sp_request_params ||= begin
        if sp_request_url.present?
          UriService.params(sp_request_url)
        else
          {}
        end
      end
    end

    def sp_request_url
      sp_session[:request_url] || service_provider_request&.url
    end

    def validate_sp_exists
      redirect_to account_url if current_sp.nil?
    end
  end
end