using Dapper;
using Npgsql;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace Ventas.API.Controllers;

[ApiController]
[Route("api/[controller]")]
[Authorize]
public class UsuarioController : ControllerBase
{
    private readonly string _connectionString;

    public UsuarioController(IConfiguration configuration) => _connectionString = configuration.GetConnectionString("Default")!;

    [HttpGet("{id}")]
    public async Task<IActionResult> Info(string id)
    {
        using var connection = new NpgsqlConnection(_connectionString);
        var rows = await connection.QueryAsync("sige_sam_v3.BuscarUsuario",
            new { usuarioid = id },
            commandType: System.Data.CommandType.StoredProcedure);
        return Ok(rows.Select(r => (Dictionary<string, object>)(IDictionary<string, object>)r!));
    }

    [HttpGet("{id}/perfil")]
    public async Task<IActionResult> Perfil(string id)
    {
        using var connection = new NpgsqlConnection(_connectionString);
        var rows = await connection.QueryAsync("sige_sam_v3.BuscarPerfilUsuario",
            new { usuario = id },
            commandType: System.Data.CommandType.StoredProcedure);
        return Ok(rows.Select(r => (Dictionary<string, object>)(IDictionary<string, object>)r!));
    }

    [HttpGet("vendedores")]
    public async Task<IActionResult> VendedoresActivos()
    {
        using var connection = new NpgsqlConnection(_connectionString);
        var rows = await connection.QueryAsync("sige_sam_v3.BuscarVendedoresActivos",
            commandType: System.Data.CommandType.StoredProcedure);
        return Ok(rows.Select(r => (Dictionary<string, object>)(IDictionary<string, object>)r!));
    }
}