class OmniauthController < ApplicationController
  skip_before_action :set_current_user

  def request
    # This will be handled by OmniAuth middleware
    # The request will be redirected to the IdP
  end

  def callback
    auth = request.env['omniauth.auth']
    account_id = params[:account_id]

    # Check if SAML is enabled for this account
    saml_settings = AccountSamlSettings.find_by(account_id: account_id, enabled: true)
    return render json: { error: 'SAML not enabled for this account' }, status: :unauthorized unless saml_settings

    if auth.present?
      # Find existing user by email
      email = auth['info']['email']
      user = User.find_by(email: email)

      if user
        render json: {
          message: 'Login successful',
          user: {
            id: user.id,
            email: user.email,
            name: user.name
          }
        }
      else
        render json: {
          error: 'User not found'
        }, status: :not_found
      end
    else
      render json: {
        error: 'SAML authentication failed',
        message: request.env['omniauth.error'] || 'Unknown error'
      }, status: :unauthorized
    end
  end

  def failure
    render json: {
      error: 'SAML authentication failed',
      message: params[:message] || request.env['omniauth.error'] || 'Unknown error'
    }, status: :unauthorized
  end
end