class Users::CredentialsController < ApplicationController
  before_action :set_credential, only: :destroy

  def index
    @credentials = Current.identity.credentials.order(name: :asc, created_at: :desc)
  end

  def new
    @creation_options = Identity::Credential.creation_options(identity: Current.identity, display_name: Current.user.name)
    session[:webauthn_challenge] = @creation_options.challenge
  end

  def create
    Identity::Credential.register(
      identity: Current.identity,
      name: credential_params[:name],
      client_data_json: credential_params[:client_data_json],
      attestation_object: credential_params[:attestation_object],
      challenge: session.delete(:webauthn_challenge),
      origin: request.base_url,
      transports: Array(credential_params[:transports])
    )

    redirect_to user_credentials_path(Current.user)
  end

  def destroy
    @credential.destroy!
    redirect_to user_credentials_path(Current.user)
  end

  private
    def set_credential
      @credential = Current.identity.credentials.find(params[:id])
    end

    def credential_params
      params.expect(credential: [ :name, :client_data_json, :attestation_object, transports: [] ])
    end
end