defmodule ToweropsWeb.UserResetPasswordController do
  @moduledoc false

  use ToweropsWeb, :controller

  alias Towerops.Accounts

  def new(conn, _params) do
    form = Phoenix.Component.to_form(%{}, as: "user")
    render(conn, :new, form: form)
  end

  def create(conn, %{"user" => %{"email" => email}}) do
    _ =
      if user = Accounts.get_user_by_email(email) do
        Accounts.deliver_user_reset_password_instructions(
          user,
          &url(~p"/users/reset-password/#{&1}")
        )
      end

    # Always return success message to prevent email enumeration
    conn
    |> put_flash(
      :info,
      "If your email is in our system, you will receive password reset instructions shortly."
    )
    |> redirect(to: ~p"/users/log-in")
  end
end