<?php

namespace App\Domains\ParticipantRefund\Controllers;

use App\Domains\ParticipantRefund\Actions\ResendRefundMail\ResendRefundMailCommand;
use App\Domains\ParticipantRefund\Actions\ResendRefundMail\ResendRefundMailRequest;
use App\Scopes\CommonController;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;

class ResendRefundMailController extends CommonController
{
    public function __invoke(string $refundToken, Request $request): JsonResponse
    {
        $refund = $this->participantRefunds->getByToken($refundToken);

        // Der Token ist hier keine Berechtigung: nachschicken darf nur, wer die Veranstaltung auch
        // verwalten kann. `getById()` prüft genau das.
        if ($refund === null || $this->events->getById($refund->event_id) === null) {
            abort(403, 'Zugriff verweigert.');
        }

        $response = new ResendRefundMailCommand(new ResendRefundMailRequest($refund))->execute();

        return response()->json([
            'status' => $response->success ? 'success' : 'error',
            'message' => $response->message,
        ]);
    }
}