use axum::Json;
use axum::extract::{Path, State};
use jwt::extractor::{AuthAdmin, AuthUser};
use uuid::Uuid;

use crate::error::UserResult;
use crate::features::UserService;
use crate::features::suspensions::{SuspendCmd, SuspensionView};

#[utoipa::path(
    post,
    path = "/user/admin/users/{uid}/suspensions",
    tag = "user",
    params(("uid" = Uuid, Path, description = "Target user identifier.")),
    request_body = SuspendCmd,
    responses(
        (status = 200, description = "Suspension created (also sets users.is_restricted = true).", body = SuspensionView),
    ),
    security(("bearer_auth" = [])),
)]
pub(crate) async fn handler(
    State(svc): State<UserService>,
    AuthAdmin(AuthUser { claims }): AuthAdmin,
    Path(uid): Path<Uuid>,
    Json(cmd): Json<SuspendCmd>,
) -> UserResult<Json<SuspensionView>> {
    Ok(Json(svc.suspend_user(claims.sub, uid, cmd).await?))
}