using EntitlementBLL.Interfaces;
using EntitlementDAL.DTOs;
using FastEndpoints;
using GB5Shared.DTO.Framework.Login;
using GB5Shared.DTO.Framework.ResponseStandard;
using GB5Shared.FastEndPoint;
using static GB5Shared.GB5Constant.Constant;

namespace EntitlementSL.Endpoints.Provisioning;

// Prospect signup path — reachable pre-account. AllowAnonymous() here matches the existing
// codebase precedent (e.g. IDMSSL's GetEngagement/SaveEngagement): the caller still supplies a
// self-asserted LoginDTO via the "Login" header (no ASP.NET role check), same trust model used
// throughout GB5 outside of DXP's separate JWT session layer.
public class Provision : BaseEndpoint<Provision.Params, ResponseStandardDTO<object>>
{
    private readonly IProvisioningService _ProvisioningService;

    public Provision(IProvisioningService provisioningService) => _ProvisioningService = provisioningService;

    public override void Configure()
    {
        Post("/lic/Provisioning.svc/Provision");
        AllowAnonymous();
    }

    public record Params(
        [property: FromHeader] string                       Login,
        [property: FromBody]   ProvisionSubscriptionRequest  Request
    );

    protected override string? GetCacheKey(Params req, LoginDTO loginDTO) => null;

    protected override async Task<ResponseStandardDTO<object>> ExecuteAsync(Params req, LoginDTO loginDTO, CancellationToken ct)
    {
        var result = await _ProvisioningService.ProvisionSubscriptionAsync(req.Request, ct);
        return await GB5Shared.ResponseStandard.Response.CreateSuccessResponse(result, CacheKeyLevel.NOT_REQUIRED, loginDTO);
    }
}