<?php
declare(strict_types=1);

require_once dirname(dirname(__DIR__)) . '/bootstrap.php';

if (!TaskCertRequest::isPost()) {
    TaskCertResponse::error('Methode nicht erlaubt', 405);
}

$auth = TaskCertAuthContext::fromGlobals();
if (!$auth->hasPermission('r-task-cert-admin')) {
    TaskCertResponse::error('Keine Berechtigung', 403);
}

TaskCertCsrf::assertValidFromRequest(true);

$taskId = TaskCertRequest::postInt('task_id', 0);
if ($taskId <= 0) {
    TaskCertResponse::error('Ungültige task_id', 400);
}

try {
    $services = task_cert_services();
    $services['taskDefinitionService']->softDeleteTask($taskId);

    $redirectTo = TaskCertRequest::postString('redirect_to', '');
    if ($redirectTo !== '') {
        TaskCertResponse::redirect($redirectTo);
    }

    TaskCertResponse::json([
        'success' => true,
        'task_id' => $taskId,
    ]);
} catch (Throwable $throwable) {
    TaskCertResponse::json([
        'success' => false,
        'error' => $throwable->getMessage(),
    ], 400);
}