<?php

/**
 * @package     Joomla.Plugin
 * @subpackage  System.Webauthn
 *
 * @copyright   (C) 2020 Open Source Matters, Inc. <https://www.joomla.org>
 * @license     GNU General Public License version 2 or later; see LICENSE.txt
 */

namespace Joomla\Plugin\System\Webauthn\PluginTraits;

use Exception;
use Joomla\CMS\Factory;
use Joomla\CMS\Log\Log;
use Joomla\Database\DatabaseDriver;
use Joomla\Event\Event;
use Joomla\Utilities\ArrayHelper;

// phpcs:disable PSR1.Files.SideEffects
\defined('_JEXEC') or die;
// phpcs:enable PSR1.Files.SideEffects

/**
 * Delete all WebAuthn credentials for a particular user
 *
 * @since   4.0.0
 */
trait UserDeletion
{
    /**
     * Remove all passwordless credential information for the given user ID.
     *
     * This method is called after user data is deleted from the database.
     *
     * @param   Event  $event  The event we are handling
     *
     * @return  void
     *
     * @since   4.0.0
     */
    public function onUserAfterDelete(Event $event): void
    {
        /**
         * @var   array       $user    Holds the user data
         * @var   bool        $success True if user was successfully stored in the database
         * @var   string|null $msg     Message
         */
        [$user, $success, $msg] = $event->getArguments();

        if (!$success) {
            $this->returnFromEvent($event, true);
        }

        $userId = ArrayHelper::getValue($user, 'id', 0, 'int');

        if ($userId) {
            Log::add("Removing WebAuthn Passwordless Login information for deleted user #{$userId}", Log::DEBUG, 'webauthn.system');

            /** @var DatabaseDriver $db */
            $db = Factory::getContainer()->get('DatabaseDriver');

            $query = $db->getQuery(true)
                ->delete($db->qn('#__webauthn_credentials'))
                ->where($db->qn('user_id') . ' = :userId')
                ->bind(':userId', $userId);

            try {
                $db->setQuery($query)->execute();
            } catch (Exception $e) {
                // Don't worry if this fails
            }

            $this->returnFromEvent($event, true);
        }
    }
}