<?php

namespace App\Http\Middleware;

use App\Services\Qms\DeviceService;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class AuthenticateQmsDevice
{
    public function __construct(
        protected DeviceService $devices,
    ) {}

    public function handle(Request $request, Closure $next, ?string $type = null): Response
    {
        $token = (string) ($request->route('token') ?? $request->header('X-Device-Token', ''));

        $device = $this->devices->findByToken($token);
        abort_unless($device, 401);

        if ($type && $device->type !== $type) {
            abort(403);
        }

        $request->attributes->set('qms.device', $device);

        return $next($request);
    }
}