package router

import (
	"finance/backend/internal/api/auth"
	"finance/backend/internal/api/v1/users"
	"finance/backend/internal/config"
	"finance/backend/internal/database"
	"net/http"

	"github.com/gin-gonic/gin"
)

// SetupRouter configures the API routes
func SetupRouter(cfg *config.Config) *gin.Engine {
	r := gin.Default()

	// Enable CORS
	r.Use(func(c *gin.Context) {
		c.Writer.Header().Set("Access-Control-Allow-Origin", "*")
		c.Writer.Header().Set("Access-Control-Allow-Credentials", "true")
		c.Writer.Header().Set("Access-Control-Allow-Headers", "Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With")
		c.Writer.Header().Set("Access-Control-Allow-Methods", "POST, OPTIONS, GET, PUT, DELETE")

		if c.Request.Method == "OPTIONS" {
			c.AbortWithStatus(204)
			return
		}

		c.Next()
	})

	// Public utility endpoints
	r.GET("/ping", func(c *gin.Context) {
		c.JSON(http.StatusOK, gin.H{
			"message": "pong",
		})
	})

	// Add database status endpoint
	r.GET("/db-status", func(c *gin.Context) {
		// Try to get a connection from the pool
		sqlDB, err := database.DB.DB()
		if err != nil {
			c.JSON(http.StatusInternalServerError, gin.H{
				"status":  "error",
				"message": "Failed to get database connection",
				"error":   err.Error(),
			})
			return
		}

		// Check if database is reachable
		err = sqlDB.Ping()
		if err != nil {
			c.JSON(http.StatusInternalServerError, gin.H{
				"status":  "error",
				"message": "Database is not reachable",
				"error":   err.Error(),
			})
			return
		}

		c.JSON(http.StatusOK, gin.H{
			"status":  "success",
			"message": "Database connection is healthy",
		})
	})

	// API v1 routes
	v1 := r.Group("/api/v1")
	{
		// Auth routes (public)
		v1.POST("/auth/signup", auth.Signup(cfg))
		v1.POST("/auth/login", auth.Login(cfg))

		// Protected routes
		protected := v1.Group("")
		protected.Use(auth.AuthMiddleware(cfg))
		{
			// User routes
			protected.GET("/users/me", users.GetCurrentUser)

			// Add other protected routes here
		}
	}

	return r
}