<?php

if (!defined('ABSPATH')) {
    exit; // Exit if accessed directly
}

// Include SessionManager
require_once plugin_dir_path(__FILE__) . '../utilities/session-manager.php';

/**
 * Register REST API routes
 */
function register_school_management_routes()
{
    register_rest_route('school-management/v1', '/checkstudentof/(?P<school_id>\d+)/(?P<student_of>[^/]+)', array(
        'methods' => 'GET',
        'callback' => 'check_student_of',
        'args' => array(
            'school_id' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
            'student_of' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return !empty($param) && is_string($param);
                },
                'sanitize_callback' => function ($param, $request, $key) {
                    return sanitize_text_field(urldecode($param));
                }
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/schools', array(
        'methods' => 'GET',
        'callback' => 'get_schools',
    ));

    register_rest_route('school-management/v1', '/classesbystudentof/(?P<student_of>[^/]+)', array(
        'methods' => 'GET',
        'callback' => 'get_classes_by_studentof',
        'args' => array(
            'school_id' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/classes/(?P<school_id>\d+)', array(
        'methods' => 'GET',
        'callback' => 'get_classes_by_school',
        'args' => array(
            'school_id' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/entities/(?P<class_id>\d+)', array(
        'methods' => 'GET',
        'callback' => 'get_entities_by_class',
        'args' => array(
            'class_id' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/check-class-password/(?P<class_id>\d+)', array(
        'methods' => 'GET',
        'callback' => 'check_class_password',
        'args' => array(
            'class_id' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/check-lesson-password/(?P<entity_id>\d+)', array(
        'methods' => 'GET',
        'callback' => 'check_lesson_password',
        'args' => array(
            'entity_id' => array(
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/validate-class-password', array(
        'methods' => 'POST',
        'callback' => 'validate_class_password',
        'args' => array(
            'class_id' => array(
                'required' => true,
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
            'password' => array(
                'required' => true,
                'sanitize_callback' => 'sanitize_text_field',
            ),
        ),
    ));

    register_rest_route('school-management/v1', '/validate-lesson-password', array(
        'methods' => 'POST',
        'callback' => 'validate_lesson_password',
        'args' => array(
            'entity_id' => array(
                'required' => true,
                'validate_callback' => function ($param, $request, $key) {
                    return is_numeric($param);
                }
            ),
            'password' => array(
                'required' => true,
                'sanitize_callback' => 'sanitize_text_field',
            ),
        ),
    ));

    // Check student session
    register_rest_route('school-management/v1', '/check-student-session', array(
        'methods' => 'GET',
        'callback' => 'check_student_session',
    ));

    // Student login
    register_rest_route('school-management/v1', '/student-login', array(
        'methods' => 'POST',
        'callback' => 'student_login',
        'args' => array(
            'username' => array(
                'required' => true,
                'sanitize_callback' => 'sanitize_text_field',
            ),
            'password' => array(
                'required' => true,
                'sanitize_callback' => 'sanitize_text_field',
            ),
        ),
    ));

    // Student logout
    register_rest_route('school-management/v1', '/student-logout', array(
        'methods' => 'POST',
        'callback' => 'student_logout',
    ));
}

/**
 * Get schools data for REST API
 */
function get_schools()
{
    $school_list = get_posts(array(
        'post_type' => 'school',
        'numberposts' => -1,
        'post_status' => 'publish'
    ));
    return $school_list;
}

/**
 * Get classes by school for REST API
 */
function get_classes_by_school($request)
{
    $school_id = $request['school_id'];
    $school_post = get_post($school_id);

    if (!$school_post || $school_post->post_type !== 'school') {
        return new WP_Error('invalid_school', 'Invalid school ID', array('status' => 404));
    }

    $school_name = $school_post->post_title;

    $classes = get_posts(array(
        'post_type' => 'class',
        'numberposts' => -1,
        'post_status' => 'publish',
        'meta_query' => array(
            array(
                'key' => 'Thuộc trường',
                'value' => $school_name,
                'compare' => '='
            )
        )
    ));

    return $classes;
}
function get_classes_by_studentof($request)
{
    $student_of = urldecode($request['student_of']);
    $school_id = get_schoolid_by_title($student_of);

    if (!$school_id) {
        return new WP_Error('invalid_student_of', 'Cannot find school ID for student_of: ' . $student_of, array('status' => 404));
    }

    $school_post = get_post($school_id);

    if (!$school_post || $school_post->post_type !== 'school') {
        return new WP_Error('invalid_school', 'Invalid school ID', array('status' => 404));
    }

    $school_name = $school_post->post_title;

    $classes = get_posts(array(
        'post_type' => 'class',
        'numberposts' => -1,
        'post_status' => 'publish',
        'meta_query' => array(
            array(
                'key' => 'Thuộc trường',
                'value' => $school_name,
                'compare' => '='
            )
        )
    ));

    return $classes;
}

/**
 * Get entities by class for REST API
 */
function get_entities_by_class($request)
{
    $class_id = $request['class_id'];
    $class_post = get_post($class_id);

    if (!$class_post || $class_post->post_type !== 'class') {
        return new WP_Error('invalid_class', 'Invalid class ID', array('status' => 404));
    }

    $class_name = $class_post->post_title;

    $entities = get_posts(array(
        'post_type' => 'entity',
        'numberposts' => -1,
        'post_status' => 'publish',
        'meta_query' => array(
            array(
                'key' => 'Thuộc lớp',
                'value' => $class_name,
                'compare' => '='
            )
        )
    ));

    // Enhance entities with meta data
    $enhanced_entities = array();
    foreach ($entities as $entity) {
        $enhanced_entity = array(
            'id' => $entity->ID,
            'title' => $entity->post_title,
            'content' => $entity->post_content,
            'link' => get_post_meta($entity->ID, 'Link khi click', true),
            'image' => get_post_meta($entity->ID, 'Hình', true)
        );
        $enhanced_entities[] = $enhanced_entity;
    }

    return $enhanced_entities;
}

/**
 * Check if class has password
 */
function check_class_password($request)
{
    $class_id = $request['class_id'];
    $class_post = get_post($class_id);

    if (!$class_post || $class_post->post_type !== 'class') {
        return new WP_Error('invalid_class', 'Invalid class ID', array('status' => 404));
    }

    $class_password = get_post_meta($class_id, 'class_password', true);

    return array(
        'has_password' => !empty($class_password)
    );
}

/**
 * Check if lesson has password
 */
function check_lesson_password($request)
{
    $entity_id = $request['entity_id'];
    $entity_post = get_post($entity_id);

    if (!$entity_post || $entity_post->post_type !== 'entity') {
        return new WP_Error('invalid_entity', 'Invalid entity ID', array('status' => 404));
    }

    $lesson_password = get_post_meta($entity_id, 'lesson_password', true);

    return array(
        'has_password' => !empty($lesson_password)
    );
}

/**
 * Validate class password
 */
function validate_class_password($request)
{
    $class_id = $request['class_id'];
    $password = $request['password'];

    $class_post = get_post($class_id);

    if (!$class_post || $class_post->post_type !== 'class') {
        return new WP_Error('invalid_class', 'Invalid class ID', array('status' => 404));
    }

    $stored_password = get_post_meta($class_id, 'class_password', true);

    return array(
        'valid' => ($password === $stored_password)
    );
}

/**
 * Validate lesson password
 */
function validate_lesson_password($request)
{
    $entity_id = $request['entity_id'];
    $password = $request['password'];
    $username = $request['username'];

    $entity_post = get_post($entity_id);

    if (!$entity_post || $entity_post->post_type !== 'entity') {
        return new WP_Error('invalid_entity', 'Invalid entity ID', array('status' => 404));
    }

    $stored_password = get_post_meta($entity_id, 'lesson_password', true);
    $stored_username = get_post_meta($entity_id, 'Username', true);

    return array(
        'valid' => ($password === $stored_password && $username === $stored_username)
    );
}


/**
 * Check if a student is logged in via PHP session
 */
function check_student_session()
{
    return StudentSessionManager::checkSession();
}


/**
 * Handle student login. Look up student post by meta username and password.
 */
function student_login($request)
{
    $params = $request->get_params();
    $username = isset($params['username']) ? $params['username'] : '';
    $password = isset($params['password']) ? $params['password'] : '';

    return StudentSessionManager::login($username, $password);
}


/**
 * Handle student logout - clear session
 */
function student_logout()
{
    return StudentSessionManager::logout();
}

/**
 * Check if student_of is allowed to access school_id
 */
function check_student_of($request)
{
    $school_id = $request['school_id'];
    $student_of = $request['student_of'];

    $school_post = get_post($school_id);
    if (!$school_post || $school_post->post_type !== 'school') {
        return new WP_Error('invalid_school', 'Invalid school ID', array('status' => 404));
    }
    $school_name = $school_post->post_title;

    // student_of is the school title that student belongs to
    // Check if student_of matches the requested school's title
    $has_access = ($student_of === $school_name);

    return array(
        'has_access' => $has_access,
        'school_name' => $school_name,
        'student_of' => $student_of
    );
}

function get_schoolid_by_title($title)
{
    $school = get_page_by_title($title, OBJECT, 'school');
    if ($school) {
        return $school->ID;
    }
    return null;
}