<?php

namespace App\Http\Controllers\Auth;

use App\Http\Controllers\Controller;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use App\Mail\LoginOtpMail;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Mail;

class LoginController extends Controller
{
    /*
    |--------------------------------------------------------------------------
    | Login Controller
    |--------------------------------------------------------------------------
    |
    | This controller handles authenticating users for the application and
    | redirecting them to your home screen. The controller uses a trait
    | to conveniently provide its functionality to your applications.
    |
    */

    use AuthenticatesUsers;

    /**
     * Where to redirect users after login.
     *
     * @var string
     */
    protected $redirectTo = '/home';

    /**
     * Create a new controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware('guest')->except('logout');
        $this->middleware('auth')->only('logout');
    }
    public function authenticate(Request $request)
    {
        $request->validate([
            'email' => 'required|email',
            'password' => 'required',
        ]);

        $staff = StaffMember::where('email', $request->email)->where('status', 'ACTIVE')->first();

        // 1. Check if staff exists and password is correct
        if ($staff && Hash::check($request->password, $staff->password)) {
            
            // 2. Generate 6-digit OTP
            $otp = rand(100000, 999999);
            
            // 3. Save to database with 10-minute expiration
            $staff->update([
                'otp_code' => $otp,
                'otp_expires_at' => now()->addMinutes(10)
            ]);

            // 4. Send Email
            Mail::to($staff->email)->send(new LoginOtpMail($otp));

            // 5. Store staff ID in session
            session(['otp_staff_id' => $staff->id]);

            return redirect()->route('otp.verify');
        }

        return back()->withErrors(['email' => 'Invalid credentials or inactive account.']);
    }
}