<?php
namespace Incoviba\UI\Common\Middleware;

use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Server\RequestHandlerInterface as Handler;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ResponseFactoryInterface as Factory;
use Incoviba\UI\Common\Service\Auth as Service;

class Auth {
    protected $service;
    protected $factory;
    protected $exceptions;
    public function __construct(Service $service, Factory $factory, array $exception_routes) {
        $this->service = $service;
        $this->factory = $factory;
        $this->exceptions = $exception_routes;
    }
    public function __invoke(Request $request, Handler $handler): Response {
        $path = $request->getUri()->getPath();
        if (in_array($path, $this->exceptions) or str_contains($path, '.') or $this->service->isIn()) {
            return $handler->handle($request);
        }
        $route = $request->getUri();
        $_SESSION['route'] = '' . $route;
        $response = $this->factory->createResponse(302);
        return $response
            ->withHeader('Location', '/auth/login');
    }
}