<?php

declare(strict_types=1);

namespace App\Http\Requests\Api\V1;

use Illuminate\Foundation\Http\FormRequest;

/**
 * An image arrives one of two ways: as the request's `file` (multipart), or as
 * a `url` the API downloads itself (JSON). Exactly one.
 *
 * What the declared type says is only a first filter. The controller looks at
 * the bytes, because a client names the type of what it sends and a URL's
 * server names the type of what it answers — and neither has to be telling
 * the truth.
 */
class MediaRequest extends FormRequest
{
    /**
     * Authorisation is the controller's, as everywhere else in this API — and
     * it has to happen before a URL is fetched, which is after validation.
     */
    public function authorize(): bool
    {
        return true;
    }

    /**
     * @return array<string, mixed>
     */
    public function rules(): array
    {
        return [
            'file' => [
                'required_without:url',
                'prohibits:url',
                'file',
                'max:'.(int) config('media.upload.max_kb'),
                'mimetypes:'.implode(',', (array) config('media.upload.mimes')),
            ],
            'url' => ['required_without:file', 'string', 'url:https', 'max:2048'],
            'for' => ['sometimes', 'string', 'in:'.implode(',', array_keys((array) config('media.upload.for')))],
        ];
    }
}