use axum::extract::{Path, State};
use export::data::{AppRequest, AppRequestData, AppResponseData};
use jwt::extractor::{AuthAdmin, AuthUser};
use uuid::Uuid;

use crate::error::UserResult;
use crate::features::UserService;
use crate::features::suspensions::{SuspendCmd, SuspensionView};

#[utoipa::path(
    post,
    path = "/user/admin/users/{uid}/suspensions",
    tag = "user",
    params(("uid" = Uuid, Path, description = "Target user identifier.")),
    request_body = AppRequestData<SuspendCmd>,
    responses(
        (status = 200, description = "Suspension created (also sets users.is_restricted = true).", body = AppResponseData<SuspensionView>),
    ),
    security(("bearer_auth" = [])),
)]
pub(crate) async fn handler(
    State(svc): State<UserService>,
    AuthAdmin(AuthUser { claims }): AuthAdmin,
    Path(uid): Path<Uuid>,
    cmd: AppRequest<SuspendCmd>,
) -> UserResult<AppResponseData<SuspensionView>> {
    Ok(AppResponseData::ok(
        svc.suspend_user(claims.sub, uid, cmd.into_inner()).await?,
    ))
}