<?php
class ControllerApiReward extends Controller {

    public function index() {
        $this->load->language('api/reward');

        // Delete past reward in case there is an error
        unset($this->session->data['reward']);

        $json = array();

        if (!isset($this->session->data['api_id'])) {
            $json['error'] = $this->language->get('error_permission');
        } else {
            $points = $this->customer->getRewardPoints();

            $points_total = 0;

            foreach ($this->cart->cartProducts as $product) {
                if ($product['points']) {
                    $points_total += $product['points'];
                }
            }

            if (empty($this->request->post['reward'])) {
                $json['error'] = $this->language->get('error_reward');
            }

            if ($this->request->post['reward'] > $points) {
                $json['error'] = sprintf($this->language->get('error_points'), $this->request->post['reward']);
            }

            if ($this->request->post['reward'] > $points_total) {
                $json['error'] = sprintf($this->language->get('error_maximum'), $points_total);
            }

            if (!$json) {
                $this->session->data['reward'] = abs($this->request->post['reward']);

                $json['success'] = $this->language->get('text_success');
            }
        }

        if (isset($this->request->server['HTTP_ORIGIN'])) {
            $this->response->addHeader('Access-Control-Allow-Origin: ' . $this->request->server['HTTP_ORIGIN']);
            $this->response->addHeader('Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS');
            $this->response->addHeader('Access-Control-Max-Age: 1000');
            $this->response->addHeader('Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With');
        }

        $this->response->addHeader('Content-Type: application/json');
        $this->response->setOutput(json_encode($json));
    }

    public function maximum() {
        $this->load->language('api/reward');

        $json = array();

        if (!isset($this->session->data['api_id'])) {
            $json['error'] = $this->language->get('error_permission');
        } else {
            $json['maximum'] = 0;

            foreach ($this->cart->cartProducts as $product) {
                if ($product['points']) {
                    $json['maximum'] += $product['points'];
                }
            }
        }

        if (isset($this->request->server['HTTP_ORIGIN'])) {
            $this->response->addHeader('Access-Control-Allow-Origin: ' . $this->request->server['HTTP_ORIGIN']);
            $this->response->addHeader('Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS');
            $this->response->addHeader('Access-Control-Max-Age: 1000');
            $this->response->addHeader('Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With');
        }

        $this->response->addHeader('Content-Type: application/json');
        $this->response->setOutput(json_encode($json));
    }

    public function available() {
        $this->load->language('api/reward');

        $json = array();

        if (!isset($this->session->data['api_id'])) {
            $json['error'] = $this->language->get('error_permission');
        } else {
            $json['points'] = $this->customer->getRewardPoints();
        }

        if (isset($this->request->server['HTTP_ORIGIN'])) {
            $this->response->addHeader('Access-Control-Allow-Origin: ' . $this->request->server['HTTP_ORIGIN']);
            $this->response->addHeader('Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS');
            $this->response->addHeader('Access-Control-Max-Age: 1000');
            $this->response->addHeader('Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With');
        }

        $this->response->addHeader('Content-Type: application/json');
        $this->response->setOutput(json_encode($json));
    }

}