pokemon.trade/app/graphql/mutations/user/login.rb

# frozen_string_literal: true

module Mutations
  module User
    class Login < Mutations::BaseMutation
      # include ::ControllerMethods

      field :user, Types::UserType, null: false

      argument :login, String, required: true
      argument :password, String, required: true

      def resolve(login:, password:)
        user = User.find_for_database_authentication(login: login)

        if user && active_for_authentication?(user)
          if invalid_for_authentication?(user, password)
            raise_user_error('bad credentials')
          end

          set_auth_headers(user)
          controller.sign_in(:user, user, store: false, bypass: false)

          {user: user}
        elsif user && !active_for_authentication?(user)
          if locked?(user)
            raise_user_error('account locked')
          else
            raise_user_error('account not confirmed', email: user.email)
          end
        else
          raise_user_error('bad credentials given')
        end
      end

      private

      def invalid_for_authentication?(user, password)
        valid_password = user.valid_password?(password)

        (user.respond_to?(:valid_for_authentication?) && !user.valid_for_authentication? { valid_password }) ||
          !valid_password
      end

      def active_for_authentication?(user)
        !user.respond_to?(:active_for_authentication?) || user.active_for_authentication?
      end

      def locked?(user)
        user.respond_to?(:locked_at) && user.locked_at
      end
    end
  end
end