<?php
/**
 * Responsible for managing the login duration settings in a WordPress environment.
 *
 * @package WP_Defender\Component\Security_Tweaks
 */

namespace WP_Defender\Component\Security_Tweaks;

use WP_Error;
use Calotes\Helper\HTTP;
use WP_Defender\Traits\Security_Tweaks_Option;

/**
 * Manages the login duration settings.
 */
class Login_Duration extends Abstract_Security_Tweaks implements Security_Key_Const_Interface {

	use Security_Tweaks_Option;

	public const DEFAULT_DAYS = 14;
	public const OPTION_NAME  = 'defender_security_tweeks_login-duration';
	/**
	 * Slug identifier for the component.
	 *
	 * @var string
	 */
	public string $slug = 'login-duration';
	/**
	 * Check whether the issue has been resolved or not.
	 *
	 * @var bool
	 */
	public $resolved = false;

	/**
	 * Check whether the issue has been resolved or not.
	 *
	 * @return bool
	 */
	public function check(): bool {
		return $this->resolved;
	}

	/**
	 * Validates if the provided duration is a positive number.
	 *
	 * @param  string|int $duration  The duration to validate.
	 *
	 * @return bool True if the duration is incorrect, false otherwise.
	 */
	private function is_incorect_duration( $duration ): bool {
		return ( ! is_numeric( $duration ) || 0 >= (int) $duration );
	}

	/**
	 * Here is the code for processing, if the return is true, we add it to resolve list, WP_Error if any error.
	 *
	 * @return bool|WP_Error
	 */
	public function process() {
		$duration = HTTP::post( 'duration' );

		if ( $this->is_incorect_duration( $duration ) ) {
			$this->resolved = false;

			return new WP_Error(
				'defender_invalid_duration',
				esc_html__( 'Duration can only be a number and greater than 0.', 'defender-security' )
			);
		}
		$this->resolved = true;
		// Sync with the Session feature.
		$session_settings                 = wd_di()->get( \WP_Defender\Model\Setting\Session_Protection::class );
		$session_settings->login_duration = (int) $duration;
		$session_settings->save();

		return update_site_option( self::OPTION_NAME, $duration );
	}

	/**
	 * This is for un-do stuff that were done in @process.
	 *
	 * @return bool
	 */
	public function revert(): bool {
		return delete_site_option( self::OPTION_NAME );
	}

	/**
	 * Set $duration as resolved if value > 0 otherwise revert value.
	 */
	public function shield_up() {
		$duration = $this->get_duration_in_days();
		if ( $this->is_incorect_duration( $duration ) ) {
			$this->resolved = false;

			return $this->revert();
		}
		$this->resolved = true;
		add_filter( 'auth_cookie_expiration', array( $this, 'cookie_duration' ), 10, 3 );
		// Todo: need hook 'login_message'?
	}

	/**
	 * Cookie duration in days in seconds.
	 *
	 * @param  int  $duration  Default duration.
	 * @param  int  $user_id  Current user id.
	 * @param  bool $remember  Remember me login.
	 *
	 * @return int
	 */
	public function cookie_duration( $duration, $user_id, $remember ) {
		$saved_duration = $this->get_tweak_duration();

		// When remember is set or saved_duration is smaller than 2 days, return 1 day in seconds.
		if ( $remember || 2 > $saved_duration ) {
			return $saved_duration * DAY_IN_SECONDS;
		}

		return $duration;
	}

	/**
	 * This will define a value for duration, use in bulk resolve.
	 */
	public function bulk_process() {
		$duration = 7;
		update_site_option( self::OPTION_NAME, $duration );
	}

	/**
	 * Get duration in days.
	 *
	 * @return int
	 */
	private function get_duration_in_days(): int {
		$duration = apply_filters(
			"defender_security_tweaks_{$this->slug}_get_duration",
			get_site_option( self::OPTION_NAME )
		);
		return is_int( $duration ) ? $duration : (int) $duration;
	}

	/**
	 * Get duration in days.
	 *
	 * @return int
	 */
	public function get_tweak_duration(): int {
		$duration = $this->get_duration_in_days();
		if ( $this->is_incorect_duration( $duration ) ) {
			return self::DEFAULT_DAYS;
		}

		return $duration;
	}

	/**
	 * Update duration.
	 *
	 * @param int $duration The duration.
	 */
	public function update_tweak_duration( int $duration ) {
		if ( $this->is_incorect_duration( $duration ) ) {
			return;
		}

		update_site_option( self::OPTION_NAME, $duration );
	}

	/**
	 * Retrieve the tweak's label.
	 *
	 * @return string
	 */
	public function get_label(): string {
		return esc_html__( 'Manage login Duration', 'defender-security' );
	}

	/**
	 * Get the error reason.
	 *
	 * @return string
	 */
	public function get_error_reason(): string {
		return sprintf(
			/* translators: %d: Number of days. */
			esc_html__( 'Your login duration is %d days.', 'defender-security' ),
			$this->get_tweak_duration()
		);
	}

	/**
	 * Return a summary data of this tweak.
	 *
	 * @return array
	 */
	public function to_array(): array {
		$duration = $this->get_tweak_duration();

		return array(
			'slug'             => $this->slug,
			'title'            => $this->get_label(),
			'errorReason'      => $this->get_error_reason(),
			'successReason'    => sprintf(
			/* translators: %d: Number of days. */
				wp_strip_all_tags( __( 'Login duration is set to %d days.', 'defender-security' ) ),
				$duration
			),
			'misc'             => array(
				'duration'           => $duration,
				'show_action_button' => true,
				'show_revert_button' => true,
			),
			'bulk_description' => sprintf(
			/* translators: %d: WordPress default login days. */
				wp_strip_all_tags( __( "\"Remember Me\" can keep users logged in for %d days by default. Manage login duration to limit long running sessions and help protect accounts that don't need frequent backend access.", 'defender-security' ) ),
				self::DEFAULT_DAYS
			),
			'bulk_title'       => wp_strip_all_tags( __( 'Login Duration', 'defender-security' ) ),
		);
	}
}