# frozen_string_literal: true

class StartFormResubmitController < ApplicationController
  layout 'form'

  skip_before_action :authenticate_user!
  skip_authorization_check

  around_action :with_browser_locale
  before_action :load_resubmit_submitter
  before_action :load_template
  before_action :authorize_start!

  def update
    @submitter = Submitters::StartForm.find_or_initialize_submitter(
      @template, submitter_params, exclude_completed: true, request:
    )

    if Templates.filter_undefined_submitters(@template.submitters).size > 1 && @submitter.new_record?
      @error_message = multiple_submitters_error_message

      return render 'start_form/show', status: :unprocessable_content
    end

    if (is_new_record = @submitter.new_record?)
      Submitters::StartForm.assign_submission_attributes(
        @submitter, @template,
        ip: request.remote_ip, user_agent: request.user_agent, resubmit_submitter: @resubmit_submitter
      )

      Submissions::AssignDefinedSubmitters.call(@submitter.submission)
    else
      @submitter.assign_attributes(ip: request.remote_ip, ua: request.user_agent)
    end

    if @template.preferences['shared_link_2fa'] == true
      handle_require_2fa(@submitter, is_new_record:)
    elsif @submitter.save
      Submitters::StartForm.enqueue_new_submitter_jobs(@submitter) if is_new_record

      Submitters::StartForm.assign_start_form_cookie(request, @submitter)

      redirect_to submit_form_path(@submitter.slug)
    else
      render 'start_form/show', status: :unprocessable_content
    end
  end

  private

  def load_resubmit_submitter
    @resubmit_submitter = Submitter.find_by(slug: params[:resubmit])

    raise ActiveRecord::RecordNotFound if @resubmit_submitter.blank? ||
                                          !Submitters::StartForm.can_resubmit?(@resubmit_submitter)
  end

  def load_template
    @template = @resubmit_submitter.template
  end

  def authorize_start!
    redirect_to submit_form_path(@resubmit_submitter.slug) if @template.archived_at? || @template.account.archived_at?
  end

  def submitter_params
    @resubmit_submitter.slice(:name, :phone, :email)
  end

  def multiple_submitters_error_message
    if current_user&.account_id == @template.account_id
      helpers.t('this_submission_has_multiple_signers_which_prevents_the_use_of_a_sharing_link_html')
    else
      I18n.t('not_found')
    end
  end

  def handle_require_2fa(submitter, is_new_record:)
    if Submitters::StartForm.verify_2fa_and_save_submitter(submitter, request, is_new_record:)
      redirect_to submit_form_path(submitter.slug)
    else
      Submitters.send_shared_link_email_verification_code(submitter, request:)

      render 'start_form/email_verification'
    end
  rescue Submitters::StartForm::NotSaved
    render 'start_form/show', status: :unprocessable_content
  rescue Submitters::UnableToSendCode, Submitters::InvalidOtp => e
    redirect_to start_form_path(@template.slug, params: submitter_params.merge(email_verification: true)),
                alert: e.message
  rescue RateLimit::LimitApproached
    redirect_to start_form_path(@template.slug, params: submitter_params.merge(email_verification: true)),
                alert: I18n.t(:too_many_attempts)
  end
end