import type { PayloadRequest } from "payload"
import {
  ForgotPasswordInit,
  ForgotPasswordVerify,
  PasswordSignin,
  PasswordSignup,
  ResetPassword,
} from "../protocols/password.js"
import { InvalidAPIRequest } from "../errors/apiErrors.js"
import { APP_COOKIE_SUFFIX } from "../../constants.js"
import type { PasswordProviderConfig } from "../../types.js"

export function PasswordAuthHandlers(
  request: PayloadRequest,
  pluginType: string,
  kind: string,
  internal: {
    usersCollectionSlug: string
  },
  secret: string,
  useAdmin: boolean,
  successRedirectPath: string,
  errorRedirectPath: string,
  providerConfig: PasswordProviderConfig,
  stage?: string | undefined,
): Promise<Response> {
  switch (kind) {
    case "signin":
      return PasswordSignin(
        pluginType,
        request,
        internal,
        useAdmin,
        secret,
        successRedirectPath,
        errorRedirectPath,
      )
    case "signup":
      return PasswordSignup(
        pluginType,
        request,
        internal,
        useAdmin,
        secret,
        successRedirectPath,
        errorRedirectPath,
      )
    case "forgot-password":
      switch (stage) {
        case "init":
          return ForgotPasswordInit(
            request,
            internal,
            providerConfig.emailTemplates.forgotPassword,
          )
        case "verify":
          return ForgotPasswordVerify(request, internal)
        default:
          throw new InvalidAPIRequest()
      }
    case "reset-password":
      return ResetPassword(
        `__${pluginType}-${APP_COOKIE_SUFFIX}`,
        secret,
        internal,
        request,
      )
    default:
      throw new InvalidAPIRequest()
  }
}