<?php

declare(strict_types=1);

namespace Apoloz\AlfaBank\Http\Middleware;

use Psr\Log\LoggerInterface;
use Saloon\Contracts\RequestMiddleware;
use Saloon\Http\PendingRequest;

class LoggingRequestMiddleware implements RequestMiddleware
{
    public function __construct(protected LoggerInterface $logger) {}

    public function __invoke(PendingRequest $request): void
    {
        $this->logger->info(
            "AlfaBank Request: {$request->getMethod()->value} {$request->getUrl()}",
            [
                'host'    => $request->getConnector()->resolveBaseUrl(),
                'headers' => $this->maskHeaders($request->headers()->all()),
                'body'    => $this->maskBody($request->body()?->all()),
            ]
        );
    }

    protected function maskHeaders(array $headers): array
    {
        if (isset($headers['Authorization'])) {
            $headers['Authorization'] = 'Bearer *****';
        }

        return $headers;
    }

    protected function maskBody(mixed $body): mixed
    {
        if (! is_array($body)) {
            return $body;
        }

        $sensitiveKeys = ['pan', 'cvc', 'digestSignatures', 'client_secret', 'refresh_token', 'access_token'];

        foreach ($body as $key => $value) {
            if (in_array($key, $sensitiveKeys, true)) {
                $body[$key] = '*****';
            } elseif (is_array($value)) {
                $body[$key] = $this->maskBody($value);
            }
        }

        return $body;
    }
}