<?php
	declare(strict_types = 1);
	namespace Kimendisch\Sbgg_Jetzt;
	use Flake\Csrf;
	
	// DECODE REQUEST //
	// get json string
	$json_body = file_get_contents("php://input");
	if(strlen($json_body) <= 0){
		http_response_code(400);
		echo("malformed request body");
		die();
	}
	
	// try decoding json
	$request = json_decode($json_body, true);
	if(json_last_error() != JSON_ERROR_NONE){
		http_response_code(400);
		echo("malformed request body");
		die();
	}
	
	
	// VALIDATE VALUES //
	// csrf token
	Csrf::check(token: $request["csrf_token"] ?? "");
	
	// mail address
	$mail_address = $request["mail_address"] ?? "";
	if(!is_string($mail_address)){
		http_response_code(400);
		echo("invalid mail address");
		die();
	}
	if(!preg_match("/^[a-zA-Z0-9\.\-\_\+]+@([a-z0-9\-]+\.)+[a-z0-9\-]{2,}$/", $mail_address)){
		http_response_code(400);
		echo("invalid mail address");
		die();
	}
	
	// content name
	$content_name = $request["content_name"] ?? "";
	if(!is_string($content_name)){
		http_response_code(400);
		echo("invalid content name");
		die();
	}
	if(!preg_match("/^\d{4}-\d{2}-\d{2}(-[a-z0-9]+)+$/", $content_name)){
		http_response_code(400);
		echo("invalid content name");
		die();
	}
	
	
	// CHECK WHETHER THIS ADDRESS IS A MEMBER //
	if(!Newsletter::is_member(mail_address: $mail_address)){
		http_response_code(200);
		echo(json_encode([
			"success" => false,
			"reason" => "no_member"
		]));
		die();
	}
	
	
	// TRY SENDING //
	// make sure session isn't locked
	if(extension_loaded("session")) session_write_close();
	
	// send
	if(!Newsletter::send_one(mail_address: $mail_address, content_name: $content_name)){
		http_response_code(200);
		echo(json_encode([
			"success" => false
		]));
		die();
	}
	
	
	// POSITIVE RESPONSE //
	http_response_code(200);
	echo(json_encode([
		"success" => true
	]));
?>