Flockingbird/roost

# frozen_string_literal: true

require 'rack/jwt'

module Api
  ##
  # The API server. Sinatra API only server. Main trigger for the commands
  # and entrypoint for reading data.
  class ApiController < ::ApplicationController
    # Find authentication details
    get '/api/session' do
      body current_member.to_h.slice(:aggregate_id, :handle, :name, :email)
                         .to_json
      status(200)
    end

    # Create a new invitation
    post '/api/invitations/:aggregate_id' do
      invitation_params = json_params.merge(inviter: current_member.to_h)
      member = Commands.handle('Member', 'InviteMember', invitation_params)
      status(201)
      headers('Location' => invitation_url(member.invitation_token))
      body '{}'
    end

    configure do
      # TODO: find a proper place to configure this
      jwt_args = {
        secret: ENV['JWT_SECRET'],
        verify: true,
        options: {}
      }
      use Rack::JWT::Auth, jwt_args
    end

    before do
      content_type :json
    end

    def json_params
      # Coerce this into a symbolised Hash so Sinatra data
      # structures don't leak into the command layer
      request_body = request.body.read
      params.merge!(JSON.parse(request_body)) unless request_body.empty?

      params.transform_keys(&:to_sym)
    end

    def invitation_url(id)
      URI.join(request.base_url, "/invitations/#{id}").to_s
    end

    def member_id
      request.env['jwt.payload']['sub']
    end
  end
end