import express from 'express';
import { DataTypes } from 'sequelize';
import defineLdapSetting from '../../models/ldapSettings.js';
import authMiddleware from '../../middleware/auth.js';
import { getLdapSettings } from './ldapClient.js';
import { serialize } from './index.js';
const router = express.Router();

const editableFields = [
  'enabled',
  'url',
  'bindDn',
  'searchBase',
  'searchFilter',
  'emailAttribute',
  'usernameAttribute',
];

export default function (sequelize) {
  const { verifySignedIn, verifyAdmin } = authMiddleware(sequelize);
  const LdapSetting = defineLdapSetting(sequelize, DataTypes);

  router.put('/', verifySignedIn, verifyAdmin, async (req, res) => {
    try {
      const settings = await getLdapSettings(LdapSetting);

      const updates = {};
      for (const field of editableFields) {
        if (req.body[field] !== undefined) {
          updates[field] = req.body[field];
        }
      }
      // Only overwrite the bind password when a non-empty value is supplied,
      // so the masked GET value can be saved back without wiping it.
      if (req.body.bindCredentials) {
        updates.bindCredentials = req.body.bindCredentials;
      }

      await settings.update(updates);
      res.json(serialize(settings));
    } catch (error) {
      console.error(error);
      res.status(500).send('Internal Server Error');
    }
  });

  return router;
}