<?php
/**
 * Introspection Endpoint Functionality
 */
class IndieAuth_Introspection_Endpoint extends IndieAuth_Endpoint {

	public function __construct() {
		parent::__construct();
		add_action( 'rest_api_init', array( $this, 'register_routes' ) );
		add_filter( 'indieauth_metadata', array( $this, 'metadata' ) );
		add_filter( 'rest_index_indieauth_endpoints', array( $this, 'rest_index' ) );
	}

	public static function get_endpoint() {
		return rest_url( '/indieauth/1.0/introspection' );
	}

	public function auth_methods_supported() {
		return array_unique( apply_filters( 'indieauth_introspection_auth_methods_supported', array( 'none' ) ) );
	}

	public function metadata( $metadata ) {
		$metadata['introspection_endpoint']               = $this->get_endpoint();
		$metadata['introspection_auth_methods_supported'] = $this->auth_methods_supported();
		return $metadata;
	}

	public function rest_index( $index ) {
		$index['introspection'] = $this->get_endpoint();
		return $index;
	}

	/**
	 * Register the Route.
	 */
	public function register_routes() {
		register_rest_route(
			'indieauth/1.0',
			'/introspection',
			array(
				array(
					'methods'             => WP_REST_Server::CREATABLE,
					'callback'            => array( $this, 'introspection' ),
					'args'                => array(
						'token'           => array(
							'required' => true,
						),
						'token_type_hint' => array(
							'default' => 'all',
						), // A hint about the type of the token submitted for revocation, options are access_token or refresh_token.
					),
					'permission_callback' => '__return_true',
				),
			)
		);
	}

	/*
	 * Introspection Endpoint request handler.
	 *
	 * @param WP_REST_Request $request The Request Object.
	 * @return Response to Return to the REST Server.
	 */

	public function introspection( $request ) {
		$params = $request->get_params();
		$token  = $this->get_token( $params['token'], $params['token_type_hint'] );
		if ( $token ) {
			$token['active'] = 'true';
		} else {
			$token = array( 'active' => false );
		}

		return rest_ensure_response( $token );
	}
}