<?php
declare(strict_types=1);


namespace OneClickFormSync\Admin;

if (!defined('ABSPATH')) {
    exit;
}

/**
 * Handles loading and saving Google OAuth credentials in WordPress options.
 */
class SettingsController
{
    /**
     * Option keys.
     */
    public const CLIENT_ID_OPTION         = 'oneclickformsync_google_client_id';
    public const CLIENT_SECRET_OPTION     = 'oneclickformsync_google_client_secret';
    public const ENABLED_PROVIDERS_OPTION = 'oneclickformsync_enabled_form_providers';

    /**
     * Get Client ID.
     */
    public function getClientId(): string
    {
        return (string)get_option(self::CLIENT_ID_OPTION, '');
    }

    /**
     * Get Client Secret.
     */
    public function getClientSecret(): string
    {
        return (string)get_option(self::CLIENT_SECRET_OPTION, '');
    }

    /**
     * Get list of enabled form provider IDs.
     *
     * @return array
     */
    public function getEnabledFormProviders(): array
    {
        $enabled = get_option(self::ENABLED_PROVIDERS_OPTION, null);
        if ($enabled === null) {
            return ['elementor', 'wpforms', 'forminator'];
        }
        return is_array($enabled) ? $enabled : ['elementor', 'wpforms', 'forminator'];
    }

    /**
     * Process settings form saving.
     *
     * @return void
     */
    public function handleSaveSettings(): void
    {
        if (!isset($_POST['oneclickformsync_save_settings'])) {
            return;
        }

        // Verify nonce for CSRF check.
        check_admin_referer('oneclickformsync_save_settings_action');

        if (!current_user_can('manage_options')) {
            wp_die(esc_html__('You do not have permission to perform this action.', '1-click-form-sync'), 403);
        }

        $clientId     = sanitize_text_field($_POST['client_id'] ?? '');
        $clientSecret = sanitize_text_field($_POST['client_secret'] ?? '');

        update_option(self::CLIENT_ID_OPTION, $clientId);
        update_option(self::CLIENT_SECRET_OPTION, $clientSecret);

        if (isset($_POST['enabled_providers_submitted'])) {
            $rawProviders = isset($_POST['enabled_providers']) ? (array)$_POST['enabled_providers'] : [];
            $enabledProviders = array_map('sanitize_text_field', $rawProviders);
            update_option(self::ENABLED_PROVIDERS_OPTION, $enabledProviders);
        }

        $redirectUrl = menu_page_url('1-click-form-sync-settings', false);
        if (empty($redirectUrl)) {
            $redirectUrl = admin_url('admin.php?page=1-click-form-sync-settings');
        }

        // Redirect back to Settings page with success parameter.
        wp_safe_redirect(
            add_query_arg(
                ['oneclickformsync_updated' => '1'],
                $redirectUrl
            )
        );
        exit;
    }
}