import { Router } from 'express'
import { readFileSync, writeFileSync, existsSync } from 'fs'
import { join, dirname } from 'path'
import { fileURLToPath } from 'url'
import { newsletterLimiter } from '../middleware/rateLimiter.js'
import { antiSpam } from '../middleware/antiSpam.js'
import { createToken, verifyToken } from '../services/confirmationToken.js'
import { sendConfirmationEmail } from '../services/mailer.js'

const __dirname = dirname(fileURLToPath(import.meta.url))
const SUBS_FILE = join(__dirname, '..', 'data', 'subscribers.json')

function loadSubscribers() {
  if (!existsSync(SUBS_FILE)) return []
  try { return JSON.parse(readFileSync(SUBS_FILE, 'utf-8')) }
  catch { return [] }
}

function saveSubscribers(subs) {
  writeFileSync(SUBS_FILE, JSON.stringify(subs, null, 2), 'utf-8')
}

const router = Router()

router.post('/', newsletterLimiter, antiSpam, async (req, res) => {
  const { email } = req.body
  if (!email || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
    return res.status(400).json({ errors: { email: 'Gültige E-Mail erforderlich.' } })
  }

  // Check for existing subscription
  const subs = loadSubscribers()
  if (subs.find(s => s.email === email && s.active)) {
    return res.status(409).json({ error: 'Diese E-Mail ist bereits abonniert.' })
  }

  const token = createToken('newsletter', { email }, 48)
  await sendConfirmationEmail(email, 'newsletter', token)
  res.status(201).json({ ok: true, message: 'Bestätigungs-E-Mail gesendet.' })
})

router.get('/confirm/:token', async (req, res) => {
  const entry = verifyToken(req.params.token)
  if (!entry) {
    return res.status(410).json({ error: 'Link abgelaufen oder ungültig.' })
  }

  const subs = loadSubscribers()
  subs.push({
    email: entry.data.email,
    subscribedAt: new Date().toISOString(),
    active: true,
  })
  saveSubscribers(subs)

  res.json({ ok: true, message: 'Newsletter-Abo bestätigt.' })
})

export default router