import express from 'express';
import { DataTypes } from 'sequelize';
import defineUser from '../../models/users.js';
import { roles } from './authSettings.js';
import authMiddleware from '../../middleware/auth.js';
const router = express.Router();

export default function (sequelize) {
  const { verifySignedIn, verifyAdmin } = authMiddleware(sequelize);
  const User = defineUser(sequelize, DataTypes);

  router.put('/:userId', verifySignedIn, verifyAdmin, async (req, res) => {
    // param check
    const userId = req.params.userId;
    if (!userId) {
      return res.status(400).send('userId is required');
    }

    const { newRole } = req.body;
    if (newRole === undefined || newRole === null) {
      return res.status(400).send('newRole is required');
    }

    try {
      const targetUser = await User.findByPk(userId);
      if (!targetUser) {
        return res.status(404).send('User not found');
      }

      const adminRoleIndex = roles.findIndex((entry) => entry.uid === 'administrator');
      const userRoleIndex = roles.findIndex((entry) => entry.uid === 'user');

      // At least one administrator is required.
      if (newRole === userRoleIndex) {
        const adminCount = await User.count({
          where: {
            role: adminRoleIndex,
          },
        });

        if (adminCount <= 1) {
          return res.status(400).send('At least one administrator is required.');
        }
      }

      await targetUser.update({
        role: newRole,
      });

      res.json({ user: targetUser });
    } catch (error) {
      console.error(error);
      res.status(500).send('Internal Server Error');
    }
  });

  return router;
}