use axum::extract::{Path, State};
use export::rest::AppResponseData;
use session_layer::Session;

use crate::errors::{ApiError, GitApiError};
use crate::handler::resolve_reader;
use crate::service::GitService;
use crate::service::signatures::VerifyResultDto;

#[derive(Debug, Clone, serde::Deserialize, utoipa::IntoParams)]
pub struct CommitShaPath {
    pub space_name: String,
    pub repo_name: String,
    pub sha: String,
}

#[utoipa::path(
    get,
    path = "/repos/{space_name}/{repo_name}/signatures/commit/{sha}",
    tag = "signatures",
    description = "验证提交 GPG 签名并返回签名者、密钥和验证结果。",
    params(CommitShaPath),
    responses(
        (status = 200, description = "verify commit signature", body = AppResponseData<VerifyResultDto>)
    )
)]
pub async fn verify_commit(
    State(service): State<GitService>,
    session: Session,
    Path(path): Path<CommitShaPath>,
) -> Result<AppResponseData<VerifyResultDto>, ApiError> {
    let _ = resolve_reader(
        &service,
        &session,
        path.space_name.clone(),
        path.repo_name.clone(),
    )
    .await?;
    let out = service
        .signature_verify_commit(path.space_name, path.repo_name, path.sha)
        .await
        .map_err(GitApiError::from)?;
    Ok(AppResponseData::ok(out))
}