"use server";

import { createHmac } from "crypto";
import { redirect } from "next/navigation";
import { requireAdmin } from "../../lib/auth";
import { getPlatformDb } from "../../lib/platform-db";

export async function autoLogin(formData: FormData) {
  const session = await requireAdmin();

  const accountId = Number(formData.get("account_id"));
  const slug = formData.get("slug") as string;

  const db = getPlatformDb();
  const user = db
    .prepare("SELECT id FROM users WHERE account_id = ? AND role = 'admin' LIMIT 1")
    .get(accountId) as { id: number } | undefined;

  if (!user) redirect("/tenants?error=no-admin");

  const secret = process.env.AUTO_LOGIN_SECRET!;
  const expires = Date.now() + 60_000;
  const payload = `${user.id}:${accountId}:${expires}`;
  const sig = createHmac("sha256", secret).update(payload).digest("hex");
  const token = `${payload}:${sig}`;

  redirect(`https://${slug}.rikxplatform.nl/auto-login?token=${encodeURIComponent(token)}`);
}