auth.controller.ts

import {
  Controller,
  Post,
  Body,
  HttpCode,
  HttpStatus,
  Get,
} from "@nestjs/common";
import { Throttle } from "@nestjs/throttler";
import { AuthService } from "./auth.service";
import { NonceRequestDto, VerifyRequestDto } from "./dtos/auth.dto";
import { Auth, CurrentUser } from "./guard/auth.guard";
import { User } from "../users/user.entity";

@Controller("auth")
export class AuthController {
  constructor(private readonly authService: AuthService) {}

  /**
   * POST /auth/nonce
   * Returns a unique nonce for the given Stellar public key.
   */
  @Post("nonce")
  @Throttle({ default: { limit: 5, ttl: 900 } }) // 5 requests per 15 minutes
  @HttpCode(HttpStatus.OK)
  async nonce(@Body() dto: NonceRequestDto) {
    return this.authService.generateNonce(dto);
  }

  /**
   * POST /auth/verify
   * Verifies the signed nonce and issues a JWT.
   */
  @Post("verify")
  @Throttle({ default: { limit: 5, ttl: 900 } }) // 5 requests per 15 minutes
  @HttpCode(HttpStatus.OK)
  async verify(@Body() dto: VerifyRequestDto) {
    return this.authService.verify(dto);
  }

  /**
   * GET /auth/me  — example protected route
   */
  @Auth()
  @Get("me")
  getProfile(@CurrentUser() user: User) {
    return {
      id: user.id,
      publicKey: user.publicKey,
      createdAt: user.createdAt,
      pushNotificationsEnabled: user.pushNotificationsEnabled,
    };
  }

  /**
   * POST /auth/logout
   * Revokes the caller's active JWT session(s) by bumping tokenVersion.
   */
  @Auth()
  @Post("logout")
  @HttpCode(HttpStatus.NO_CONTENT)
  async logout(@CurrentUser() user: User) {
    await this.authService.logout(user.id);
  }
}