<?php

namespace App\Http\Middleware;

use App\Support\TenantContext;
use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class SetTenantContext
{
    public function __construct(private readonly TenantContext $context) {}

    /**
     * Handle an incoming request.
     *
     * @param  Closure(Request): (Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        $user = $request->user();
        $requestedTenantId = $request->header('X-Tenant-ID');

        if ($user?->is_platform_admin && $requestedTenantId !== null) {
            abort_unless($user->can('tenant.access-any'), 403);
            $this->context->set((int) $requestedTenantId);
        } else {
            $this->context->set($user?->tenant_id);
        }

        setPermissionsTeamId($this->context->id());

        try {
            return $next($request);
        } finally {
            $this->context->clear();
            setPermissionsTeamId(null);
        }
    }
}