<?php

declare(strict_types=1);

namespace App\Controller\Groups\Offer;

use App\Repository\Groups\AccommodationBookingRepository;
use App\Service\AccommodationBookingLinkSigner;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Attribute\Route;

class IndexController extends AbstractController
{
    public function __construct(
        private readonly AccommodationBookingRepository $bookingRepository,
        private readonly AccommodationBookingLinkSigner $linkSigner,
    ) {
    }

    /**
     * Signed-link entry point: validates the `t`/`_hash` query params once,
     * authorizes the session for this booking, and redirects to the plain
     * (session-gated) offer page — nothing downstream needs the signature again.
     */
    #[Route(path: '/groups/booking/offer/{uuid}', name: 'app_groups_offer', methods: ['GET'])]
    public function index(string $uuid, Request $request): Response
    {
        $booking = $this->bookingRepository->findOneBy(['uuid' => $uuid]);

        if (null === $booking || false === $this->linkSigner->isValidLinkRequest($request, $booking)) {
            return $this->render('groups/offer/unavailable.html.twig');
        }

        if (!$this->isCustomerVisible($booking)) {
            return $this->render('groups/offer/unavailable.html.twig');
        }

        $this->linkSigner->authorizeSession($request, $booking);

        return new RedirectResponse($this->generateUrl('app_groups_offer_view', ['uuid' => $uuid]));
    }
}