<?php

namespace App\Services\CustomDomain;

use Illuminate\Support\Facades\Http;
use Illuminate\Support\Facades\Log;

/**
 * Thin client for Ladill Domains' central SSL API. Requests/queries certificates
 * for a custom domain on the shared app server (target = app).
 */
class DomainsSslClient
{
    public function configured(): bool
    {
        return (string) config('customdomain.ssl_api_key', '') !== '';
    }

    /**
     * Ask Domains to issue + install a certificate for $host, calling back when done.
     */
    public function requestCertificate(string $host, bool $includeWww, string $callbackUrl): bool
    {
        if (! $this->configured()) {
            return false;
        }

        try {
            $res = Http::withToken((string) config('customdomain.ssl_api_key'))
                ->acceptJson()->timeout(20)
                ->post(config('customdomain.ssl_api_url').'/ssl/certificates', [
                    'host' => $host,
                    'target' => 'app',
                    'include_www' => $includeWww,
                    'callback_url' => $callbackUrl,
                    'metadata' => ['nginx_include' => config('customdomain.nginx_include')],
                ]);

            if ($res->failed()) {
                Log::warning('DomainsSslClient: request failed', ['host' => $host, 'status' => $res->status()]);

                return false;
            }

            return true;
        } catch (\Throwable $e) {
            Log::warning('DomainsSslClient: request error', ['host' => $host, 'error' => $e->getMessage()]);

            return false;
        }
    }
}