<?php

namespace KTXC\Http\Middleware;

use KTXC\Http\Request\Request;
use KTXC\Http\Response\Response;
use KTXC\Service\SecurityService;
use KTXC\Context\IdentityContext;
use KTXF\Cache\BlobCacheInterface;
use KTXF\Cache\EphemeralCacheInterface;
use KTXF\Cache\PersistentCacheInterface;

/**
 * Authentication middleware
 * Authenticates the request and initializes session identity
 * 
 * Note: This middleware does NOT enforce authentication.
 * It only attempts to authenticate if credentials are present.
 * Route-level authentication is enforced by RouterMiddleware.
 */
class AuthenticationMiddleware implements MiddlewareInterface
{
    public function __construct(
        private readonly SecurityService $securityService,
        private readonly IdentityContext $identityContext,
        private readonly EphemeralCacheInterface $ephemeralCache,
        private readonly PersistentCacheInterface $persistentCache,
        private readonly BlobCacheInterface $blobCache,
    ) {}

    public function process(Request $request, RequestHandlerInterface $handler): Response
    {
        // Attempt to authenticate the request
        $identity = $this->securityService->authenticate($request);
        
        // Initialize session identity if authentication succeeded
        if ($identity) {
            $this->identityContext->initialize($identity);
            $identityId = $this->identityContext->identifier();
            $this->ephemeralCache->setUserContext($identityId);
            $this->persistentCache->setUserContext($identityId);
            $this->blobCache->setUserContext($identityId);
        }

        // Continue to next middleware (authentication is optional at this stage)
        return $handler->handle($request);
    }
}