import { E_VAULT_KEY_EXISTS, GqlAuthenticationError, GqlInputError } from '@/lib/error'

export default {
  Query: {
    getVaultEntry: async (parent, { key }, { me, models }) => {
      if (!me) {
        throw new GqlAuthenticationError()
      }
      if (!key) {
        throw new GqlInputError('must have key')
      }
      const k = await models.vault.findUnique({
        where: {
          userId_key: {
            key,
            userId: me.id
          }
        }
      })
      return k
    }
  },

  Mutation: {
    setVaultKeyHash: async (parent, { hash }, { me, models }) => {
      if (!me) {
        throw new GqlAuthenticationError()
      }
      if (!hash) {
        throw new GqlInputError('hash required')
      }
      const { vaultKeyHash: oldKeyHash } = await models.user.findUnique({ where: { id: me.id } })
      if (oldKeyHash) {
        if (oldKeyHash !== hash) {
          throw new GqlInputError('vault key already set', E_VAULT_KEY_EXISTS)
        } else {
          return true
        }
      } else {
        await models.user.update({
          where: { id: me.id },
          data: { vaultKeyHash: hash }
        })
      }
      return true
    },
    setVaultEntry: async (parent, { key, value, skipIfSet }, { me, models }) => {
      if (!me) {
        throw new GqlAuthenticationError()
      }
      if (!key) {
        throw new GqlInputError('must have key')
      }
      if (!value) {
        throw new GqlInputError('must have value')
      }
      if (skipIfSet) {
        const existing = await models.vault.findUnique({
          where: {
            userId_key: {
              userId: me.id,
              key
            }
          }
        })
        if (existing) {
          return false
        }
      }
      await models.vault.upsert({
        where: {
          userId_key: {
            userId: me.id,
            key
          }
        },
        update: {
          value
        },
        create: {
          key,
          value,
          userId: me.id
        }
      })
      return true
    },
    unsetVaultEntry: async (parent, { key }, { me, models }) => {
      if (!me) {
        throw new GqlAuthenticationError()
      }
      if (!key) {
        throw new GqlInputError('must have key')
      }
      await models.vault.deleteMany({
        where: {
          userId: me.id,
          key
        }
      })
      return true
    },
    clearVault: async (parent, args, { me, models }) => {
      if (!me) {
        throw new GqlAuthenticationError()
      }
      await models.user.update({
        where: { id: me.id },
        data: { vaultKeyHash: '' }
      })
      await models.vault.deleteMany({ where: { userId: me.id } })
      return true
    }
  }
}