<?php

declare(strict_types=1);

namespace App\Framework\Exception\Security;

use App\Framework\Exception\Core\SecurityErrorCode;
use App\Framework\Exception\ExceptionContext;
use App\Framework\Exception\FrameworkException;

/**
 * CSRF Token Validation Failed Exception
 */
final class CsrfValidationFailedException extends FrameworkException
{
    public static function tokenValidationFailed(string $formId): self
    {
        $context = ExceptionContext::forOperation('security.csrf', 'CsrfMiddleware')
            ->withData([
                'form_id' => $formId,
                'validation_type' => 'token_mismatch',
                'client_ip' => $_SERVER['REMOTE_ADDR'] ?? 'unknown',
                'user_agent' => $_SERVER['HTTP_USER_AGENT'] ?? 'unknown',
            ])
            ->withMetadata([
                'security_threat' => 'potential_csrf_attack',
                'requires_investigation' => true,
            ]);

        return self::fromContext(
            message: 'CSRF token validation failed. This may indicate a security threat.',
            context: $context,
            errorCode: SecurityErrorCode::CSRF_TOKEN_INVALID
        );
    }

    public static function missingTokenOrFormId(bool $missingFormId, bool $missingToken): self
    {
        $missing = [];
        if ($missingFormId) {
            $missing[] = 'form_id';
        }
        if ($missingToken) {
            $missing[] = 'csrf_token';
        }

        $context = ExceptionContext::forOperation('security.csrf', 'CsrfMiddleware')
            ->withData([
                'missing_fields' => $missing,
                'validation_type' => 'missing_required_fields',
            ]);

        return self::fromContext(
            message: 'CSRF protection requires both form ID and token',
            context: $context,
            errorCode: SecurityErrorCode::CSRF_TOKEN_INVALID
        );
    }

    public static function invalidTokenFormat(string $error): self
    {
        $context = ExceptionContext::forOperation('security.csrf', 'CsrfMiddleware')
            ->withData([
                'validation_type' => 'invalid_format',
                'format_error' => $error,
            ]);

        return self::fromContext(
            message: "Invalid CSRF token format: {$error}",
            context: $context,
            errorCode: SecurityErrorCode::CSRF_TOKEN_INVALID
        );
    }
}