import { rbac } from 'better-auth-rbac';
import { betterAuth } from "better-auth";

const auth = betterAuth({
    plugins: [
        rbac()
    ]
});

import { rbacClient } from "better-auth-rbac/client";

export const authClient = createAuthClient({
  plugins: [
    rbacClient()
  ]
});

// Check permissions by IDs
const hasAccess = auth.api.hasPermission({
    body: {
        permissionIds: ['1', '2', '3'],
        userId: "1", // Optional: Check specific user
        roleId: '1'    // Optional: Check specific role
    }
});

// Check permissions by resource/action mapping
const hasAccess = auth.api.hasPermission({
    body: {
        permissions: {
            user: ["read", "create"],
            post: ["read"]
        },
        userId: "1"
    }
});

import { rbac } from 'better-auth-rbac';
import { betterAuth } from "better-auth";

// Initialize Better Auth with RBAC plugin
const auth = betterAuth({
    plugins: [
        rbac({
            // Optional configuration
            defaultRoleId: '2', // Default role ID for new users
            adminRoleIds: ['1'], // Array of admin role IDs
            bannedUserMessage: "Custom ban message", // Custom message for banned users
            impersonationSessionDuration: 3600, // Duration in seconds for impersonation sessions

            // Resource permissions (optional overrides)
            resourcePermissions: {
                user: {
                    get: "fetchUser",
                    update: "modifyUser"
                },
                session: {
                    revoke: "kill_session"
                }
            },

            // Custom permission check (optional)
            hasPermission: async (input, adapter) => {
                // Admin roles bypass permission checks
                if (input.options?.adminRoleIds?.includes(input.roleId)) {
                    return true;
                }

                if (input.permissionIds) {
                    // Using your own drizzle db;
                    const permissionsList = await db.query.permissions.findMany({
                        with: {
                            rolePermissions: {
                                where: (rolePerms, { eq }) => eq(rolePerms.id, input.roleId)
                            }
                        },
                        where: (perms, { inArray }) => inArray(perms.id, input.permissionIds),
                    });
                    return permissionsList.length > 0;
                }

                return false;
            }
        })
    ]
});