18F/identity-idp

# frozen_string_literal: true

class VerifyPersonalKeyForm
  include ActiveModel::Model
  include PersonalKeyValidator

  validates :personal_key, presence: true
  validate :validate_personal_key

  attr_accessor :personal_key
  attr_reader :user

  def initialize(user:, personal_key:)
    @user = user
    @personal_key = normalize_personal_key(personal_key)
  end

  def submit
    extra = {}
    success = valid?

    reset_sensitive_fields if !success

    FormResponse.new(success: valid?, errors: errors, extra: extra)
  end

  # @return [Pii::Attributes,nil]
  def decrypted_pii
    @decrypted_pii ||= password_reset_profile.recover_pii(personal_key)
  end

  private

  def password_reset_profile
    user.password_reset_profile
  end

  def validate_personal_key
    return check_personal_key if personal_key_decrypts?
    errors.add :personal_key, :personal_key_incorrect, type: :personal_key
  end

  def reset_sensitive_fields
    self.personal_key = nil
  end

  def personal_key_decrypts?
    decrypted_pii.present?
  rescue Encryption::EncryptionError => _err
    false
  end
end