<?php
/**
 * Local signed-token check.
 *
 * @package ZeroSpamForms
 */

namespace TwoOTwoCode\ZeroSpamForms\Engine\Checks;

defined( 'ABSPATH' ) || exit;

use TwoOTwoCode\ZeroSpamForms\Engine\CheckResult;
use TwoOTwoCode\ZeroSpamForms\Engine\ReasonCodeRegistry;
use TwoOTwoCode\ZeroSpamForms\Engine\SettingsSnapshot;
use TwoOTwoCode\ZeroSpamForms\Engine\SpamCheckInterface;
use TwoOTwoCode\ZeroSpamForms\Engine\SubmissionContext;
use TwoOTwoCode\ZeroSpamForms\Engine\Token\FormTokenService;

/**
 * Validates local HMAC submission tokens.
 */
final class JavaScriptTokenCheck implements SpamCheckInterface {
	/**
	 * Token service.
	 *
	 * @var FormTokenService
	 */
	private $token_service;

	/**
	 * Constructor.
	 *
	 * @param FormTokenService $token_service Token service.
	 */
	public function __construct( FormTokenService $token_service ) {
		$this->token_service = $token_service;
	}

	/**
	 * Get check name.
	 */
	public function get_name(): string {
		return 'javascript_token';
	}

	/**
	 * Whether the check is enabled.
	 *
	 * @param SettingsSnapshot $settings Immutable settings snapshot.
	 */
	public function is_enabled( SettingsSnapshot $settings ): bool {
		return $settings->is_check_enabled( 'javascript_token_check_enabled' );
	}

	/**
	 * Evaluate submitted token.
	 *
	 * @param SubmissionContext $context  Normalized submission context.
	 * @param SettingsSnapshot  $settings Immutable settings snapshot.
	 */
	public function evaluate( SubmissionContext $context, SettingsSnapshot $settings ): CheckResult {
		if ( '' === trim( $context->get_token() ) ) {
			return CheckResult::suspicious( ReasonCodeRegistry::MISSING_TOKEN );
		}

		if (
			! $this->token_service->validate_token(
				$context->get_token(),
				$context->get_form_id(),
				$context->get_timestamp(),
				$settings->get_token_lifetime_seconds()
			)
		) {
			return CheckResult::block( ReasonCodeRegistry::INVALID_TOKEN );
		}

		return CheckResult::pass();
	}
}