use actix_web::{HttpResponse, web};
use serde::Deserialize;
use utoipa::IntoParams;

use crate::api::response::{ApiErrorResponse, ApiResponse};
use crate::error::AppError;
use crate::service::AppService;
use crate::session::Session;

#[derive(Debug, Deserialize, IntoParams)]
pub struct PathParams {
    /// Session ID (UUID)
    pub session_id: uuid::Uuid,
}

/// Revoke a user session
///
/// Immediately terminates a specific session belonging to the authenticated user.
/// Requires authentication.
///
/// Effects:
/// - Session is marked as revoked
/// - Session can no longer be used for authentication
/// - Active connections using this session are disconnected
///
/// Returns success message on completion.
#[utoipa::path(
    delete,
    path = "/api/v1/user/security/sessions/{session_id}",
    tag = "User",
    operation_id = "userRevokeSession",
    params(PathParams),
    responses(
        (status = 200, description = "Session revoked successfully.", body = ApiResponse<String>),
        (status = 401, description = "Authentication required or session expired", body = ApiErrorResponse),
        (status = 404, description = "Session not found or already revoked", body = ApiErrorResponse),
        (status = 500, description = "Internal server error", body = ApiErrorResponse),
    ),
    security(
        ("session_cookie" = [])
    )
)]
pub async fn revoke_session(
    service: web::Data<AppService>,
    session: Session,
    path: web::Path<PathParams>,
) -> Result<HttpResponse, AppError> {
    service
        .user
        .user_revoke_session(&session, path.session_id)
        .await?;
    Ok(HttpResponse::Ok().json(ApiResponse::new("Session revoked successfully".to_string())))
}