import { NextResponse } from "next/server";
import { Role } from "@prisma/client";
import { requireAuth } from "../../../../lib/jwt";
import { getSiteSettings, updateSiteSettings } from "../../../../lib/settings";

export async function GET(req: Request) {
  try {
    const auth = await requireAuth(req);
    if (auth.role !== Role.ADMIN) {
      return NextResponse.json({ error: "Forbidden" }, { status: 403 });
    }

    const settings = await getSiteSettings();
    return NextResponse.json({ settings });
  } catch (error) {
    if (String(error).includes("Unauthorized")) {
      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
    }
    console.error("Load settings error", error);
    return NextResponse.json(
      { error: "Failed to load settings" },
      { status: 500 },
    );
  }
}

export async function POST(req: Request) {
  try {
    const auth = await requireAuth(req);
    if (auth.role !== Role.ADMIN) {
      return NextResponse.json({ error: "Forbidden" }, { status: 403 });
    }

    const body = await req.json();
    const payload: Parameters<typeof updateSiteSettings>[0] = {};
    if (body.requireLoginForContactDetails !== undefined) {
      payload.requireLoginForContactDetails = Boolean(
        body.requireLoginForContactDetails,
      );
    }
    const settings = await updateSiteSettings(payload);

    return NextResponse.json({ settings });
  } catch (error) {
    if (String(error).includes("Unauthorized")) {
      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
    }
    console.error("Save settings error", error);
    return NextResponse.json(
      { error: "Failed to save settings" },
      { status: 500 },
    );
  }
}

export const dynamic = "force-dynamic";