<?php

namespace App\Mail;

use App\Models\User;
use Illuminate\Bus\Queueable;
use Illuminate\Contracts\Queue\ShouldQueue;
use Illuminate\Mail\Mailable;
use Illuminate\Mail\Mailables\Content;
use Illuminate\Mail\Mailables\Envelope;
use Illuminate\Mail\Mailables\Headers;
use Illuminate\Queue\SerializesModels;

/**
 * Einmal-Code für den Identitätsnachweis von Konten ohne Passwort und ohne
 * 2FA (Sicherheitsaudit 07.10.2026, S-06).
 */
class SecurityConfirmationCode extends Mailable implements ShouldQueue
{
    use Queueable, SerializesModels;

    public function __construct(
        public User $user,
        public string $code,
        public string $expiresAt,
    ) {}

    public function headers(): Headers
    {
        return new Headers(text: [(string) config('bounces.reference_header', 'X-Pk-Ref') => 'user:'.$this->user->id]);
    }

    public function envelope(): Envelope
    {
        return new Envelope(
            subject: 'Ihr Bestätigungscode für pressekonto'
        );
    }

    public function content(): Content
    {
        return new Content(
            view: 'emails.auth.security-confirmation-code'
        );
    }

    public function attachments(): array
    {
        return [];
    }
}