<?php

/**
 * Matomo - free/libre analytics platform
 *
 * @link    https://matomo.org
 * @license https://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
 */

namespace Piwik\Plugins\TwoFactorAuth\Commands;

use Piwik\Container\StaticContainer;
use Piwik\Plugin\ConsoleCommand;
use Piwik\Plugins\TwoFactorAuth\TwoFactorAuthentication;

class Disable2FAForUser extends ConsoleCommand
{
    protected function configure()
    {
        $this->setName('twofactorauth:disable-2fa-for-user');
        $this->setDescription(
            'Disable two-factor authentication for a user. Useful if a user loses the device that was used for'
            . ' two-factor authentication. After it was disabled, the user will be able to set it up again.'
        );
        $this->addRequiredValueOption('login', null, 'Login of an existing user');
    }

    protected function doExecute(): int
    {
        $input = $this->getInput();
        $output = $this->getOutput();
        $this->checkAllRequiredOptionsAreNotEmpty();
        $login = $input->getOption('login');

        // Note: We can't use API here, as the API method would require a password confirmation
        $t2f = StaticContainer::get(TwoFactorAuthentication::class);
        $t2f->disable2FAforUser($login);

        $message = sprintf('<info>Disabled two-factor authentication for user: %s</info>', $login);
        $output->writeln($message);

        return self::SUCCESS;
    }
}