<?php

namespace App\Controller;

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Attribute\Route;
use Symfony\Component\Security\Http\Attribute\IsGranted;
use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;

class SecurityController extends AbstractController
{
    #[Route('/', name: 'app_login')]
    #[IsGranted('PUBLIC_ACCESS')]
    public function login(AuthenticationUtils $authenticationUtils, Request $request): Response
    {
        if (null !== $this->getUser()) {
            return $this->redirectToRoute('app_personal_data');
        }

        $error = $authenticationUtils->getLastAuthenticationError();
        $lastUsername = $authenticationUtils->getLastUsername();

        // flag this request in the session as external OAuth2 request if
        // applicable to immediately logout the current user after successful
        // authentication (see App\EventListener\AuthorizationCodeListener).
        $session = $request->getSession();
        $targetPath = $session->get('_security.main.target_path');
        if (null !== $targetPath && str_contains($targetPath, '/authorize')) {
            $session->set('_oauth2', true);
        }

        return $this->render('security/login.html.twig', [
            'last_username' => $lastUsername,
            'error' => $error,
        ]);
    }

    #[Route('/logout', name: 'app_logout')]
    #[IsGranted('ROLE_USER')]
    public function logout(): void
    {
    }
}