source: backend/web3-Ednevnik-Backend/src/main/java/com/nikola/web3ednevnikbackend/controller/AuthController.java

package com.nikola.web3ednevnikbackend.controller;

import com.nikola.web3ednevnikbackend.config.security.CustomUserDetails;
import com.nikola.web3ednevnikbackend.dto.security.LoginRequest;
import com.nikola.web3ednevnikbackend.dto.users.*;
import com.nikola.web3ednevnikbackend.model.users.Korisnik;
import com.nikola.web3ednevnikbackend.repository.auth.LoginAttemptRepository;
import com.nikola.web3ednevnikbackend.service.users.*;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpSession;
import lombok.RequiredArgsConstructor;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.web.bind.annotation.*;

import java.util.Map;
import java.util.UUID;

@RestController
@RequestMapping("/api/auth")
@RequiredArgsConstructor
public class AuthController {

    private final AuthenticationManager authenticationManager;
    private final RoditelService roditelService;
    private final BlagajnikService blagajnikService;
    private final Direktor_AdminService direktorAdminService;
    private final Klasen_RakovoditelService klasenRakovoditelService;
    private final Predmeten_NastavnikService predmetenNastavnikService;
    private final LoginAttemptRepository loginAttemptRepository;
    private final KorisnikService korisnikService;

    //    @PostMapping("/login")
//    public ResponseEntity<?> login(@RequestBody LoginRequest request,
//                                   HttpServletRequest httpRequest) {
//        System.out.println("LOGIN HIT");
//        System.out.println("Email: " + request.getEmail());
//        System.out.println("password: " + request.getPassword()
//        );
//        String ipAddress = httpRequest.getRemoteAddr();
//        Authentication authentication =
//                authenticationManager.authenticate(
//                        new UsernamePasswordAuthenticationToken(
//                                request.getEmail(),
//                                request.getPassword()
//                        )
//                );
//
//        SecurityContextHolder.getContext().setAuthentication(authentication);
//
//        HttpSession session = httpRequest.getSession(true);
//        session.setAttribute(
//                "SPRING_SECURITY_CONTEXT",
//                SecurityContextHolder.getContext()
//        );
//        CustomUserDetails userDetails = (CustomUserDetails) authentication.getPrincipal();
//
//        return ResponseEntity.ok().body(
//                Map.of(
//                        "id", userDetails.getId(),
//                        "email", authentication.getName(),
//                        "roles", authentication.getAuthorities()
//                )
//        );
//    }
    @PostMapping("/login")
    public ResponseEntity<?> login(
            @RequestBody LoginRequest request,
            HttpServletRequest httpRequest
    ) {
        System.out.println("LOGIN HIT");
        System.out.println("Email: " + request.getEmail());

        String ipAddress = httpRequest.getRemoteAddr();

        try {
            Authentication authentication =
                    authenticationManager.authenticate(
                            new UsernamePasswordAuthenticationToken(
                                    request.getEmail(),
                                    request.getPassword()
                            )
                    );

            SecurityContextHolder.getContext().setAuthentication(authentication);

            HttpSession session = httpRequest.getSession(true);
            session.setAttribute(
                    "SPRING_SECURITY_CONTEXT",
                    SecurityContextHolder.getContext()
            );

            CustomUserDetails userDetails =
                    (CustomUserDetails) authentication.getPrincipal();

            boolean isAdmin = userDetails.getAuthorities().stream()
                    .anyMatch(authority ->
                            authority.getAuthority().equals("ROLE_MON_ADMIN") ||
                                    authority.getAuthority().equals("ROLE_DIREKTOR_ADMIN")
                    );
            if (!isAdmin) {
                loginAttemptRepository.saveLoginAttempt(
                        userDetails.getId(),
                        request.getEmail(),
                        true,
                        ipAddress
                );
            }


            return ResponseEntity.ok().body(
                    Map.of(
                            "id", userDetails.getId(),
                            "email", authentication.getName(),
                            "roles", authentication.getAuthorities()
                    )
            );

        } catch (AuthenticationException e) {


            UUID userId = null;

            try {
                KorisnikResponseDTO korisnik =
                        korisnikService.findByEmail(request.getEmail());
                if (korisnik != null) {
                    userId = korisnik.getId();
                }

            } catch (Exception ignored) {
                throw new IllegalArgumentException("user with this email doesnt exist " + ignored.getMessage());
            }

            // Failed login -> Login_Attempt
            loginAttemptRepository.saveLoginAttempt(
                    userId,
                    request.getEmail(),
                    false,
                    ipAddress
            );

            return ResponseEntity
                    .status(HttpStatus.UNAUTHORIZED)
                    .body(
                            Map.of(
                                    "error",
                                    "Invalid email or password"
                            )
                    );
        }
    }

    @PostMapping("/logout")
    public ResponseEntity<?> logout(HttpServletRequest request) {
        request.getSession().invalidate();
        SecurityContextHolder.clearContext();
        System.out.println("LOGOUTTTTTTTTTTT");
        return ResponseEntity.ok(Map.of("message", "Logged out"));
    }

    @GetMapping("/me")
    public ResponseEntity<?> currentUser(Authentication authentication) {

        CustomUserDetails user =
                (CustomUserDetails) authentication.getPrincipal();
        String role = user.getAuthorities().iterator().next().getAuthority();
        String wallet = "Nema";


        switch (role) {
            case "ROLE_RODITEL" -> {
                RoditelResponseDTO roditel = roditelService.getRoditelById(user.getId());
                wallet = roditel.getMetamusk_adresa() != null ? roditel.getMetamusk_adresa() : "Nema";
            }
            case "ROLE_BLAGAJNIK" -> {
                BlagajnikResponseDTO blagajnik = blagajnikService.getBlagajnikById(user.getId());
                wallet = blagajnik.getMetamusk_adresa() != null ? blagajnik.getMetamusk_adresa() : "Nema";
            }
            // ROLE_DIREKTOR_ADMIN, ROLE_KLASEN_RAKOVODITEL, ROLE_PREDMETEN_NASTAVNIK
            default -> wallet = "Nema";
        }

        return ResponseEntity.ok(Map.of(
                "id", user.getId(),
                "email", user.getUsername(),
                "roles", user.getAuthorities(),
                "saved_wallet", wallet
        ));
    }

}