<?php

namespace App\Security\Voter;

use App\Entity\Application;
use App\Entity\Assignment;
use App\Entity\Disposition;
use App\Entity\User;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Bundle\SecurityBundle\Security;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;

class AssignmentVoter extends Voter
{
    public const VIEW = 'VIEW';
    public const EDIT = 'EDIT';
    public const APPLY = 'APPLY';

    public function __construct(
        private readonly Security $security,
        private readonly EntityManagerInterface $entityManager
    ) {
    }

    protected function supports(string $attribute, mixed $subject): bool
    {
        if (!$subject instanceof Assignment) {
            return false;
        }

        return in_array($attribute, [static::VIEW, static::EDIT, static::APPLY]);
    }

    protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token): bool
    {
        /** @var Assignment $assignment */
        $assignment = $subject;

        // All authenticated users may view assignments
        if (static::VIEW === $attribute && null !== $token->getUser()) {
            return true;
        }

        // Only users with administrative role may edit assignments
        if (static::EDIT === $attribute) {
            return $this->security->isGranted('ROLE_ADMINISTRATIVE');
        }

        // Only allow applications to published assignments
        if (Assignment::STATUS_DRAFT === $assignment->getStatus()) {
            return false;
        }

        // Only allow applications on empty slots
        $availableSlots = (int) $assignment->getAvailableDispositions();
        if (0 < $availableSlots) {
            $dispositions = $this
                ->entityManager
                ->getRepository(Disposition::class)
                ->findCurrentDispositionsByAssignment($assignment)
            ;

            return count($dispositions) < $availableSlots;
        }

        // Only teamers without existing applications may apply to the assignment
        if ($this->security->isGranted('ROLE_TEAMER')) {
            /** @var User $user */
            $user = $token->getUser();
            $teamer = $user->getTeamer();
            $application = $this
                ->entityManager
                ->getRepository(Application::class)
                ->findOneBy(['teamer' => $teamer, 'assignment' => $assignment]);

            return null === $application;
        }

        return false;
    }
}