<?php

namespace App\Http\Controllers\Api;

use App\Http\Controllers\Controller;
use App\Services\Hosting\Proxmox\VmManagementService;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;

class ConsoleValidateController extends Controller
{
    public function __invoke(Request $request, string $token, VmManagementService $management): JsonResponse
    {
        $secret = config('hosting.console.proxy_secret');
        if (! $secret || $request->header('X-Console-Proxy-Secret') !== $secret) {
            return response()->json(['error' => 'forbidden'], 403);
        }

        $data = \Illuminate\Support\Facades\Cache::get($management->consoleCacheKey($token));
        if (! $data) {
            return response()->json(['error' => 'expired'], 410);
        }

        return response()->json([
            'proxmox_ws_url' => $data['ws_url'],
            'vmid' => $data['vmid'],
            'node' => $data['node'],
        ]);
    }
}