---
// Time Trap Component //
// This component is used to prevent bots from submitting the form.
// It encrypts the current timestamp and stores it in a hidden input field.
// The server then decrypts the timestamp and checks if it's valid and
// if the time difference is within the allowed range.
// If the timestamp is invalid, the form is not submitted.

import crypto from 'crypto'

import { timeTrapSecretKey } from '../lib/timeTrapSecret'

const algorithm = 'aes-256-cbc'
const iv = crypto.randomBytes(16) // Generate a random IV for each encryption
const timestamp = Date.now().toString()

const cipher = crypto.createCipheriv(algorithm, timeTrapSecretKey, iv)
let encrypted = cipher.update(timestamp, 'utf8', 'hex')
encrypted += cipher.final('hex')

// Combine IV and encrypted timestamp, then encode as base64 for the input value
const encryptedValue = Buffer.from(`${iv.toString('hex')}:${encrypted}`).toString('base64')

// --- Time Trap Validation Start ---
// try {

//   const algorithm = 'aes-256-cbc'
//   const decodedValue = Buffer.from(input.encTimestamp, 'base64').toString('utf8')
//   const [ivHex, encryptedHex] = decodedValue.split(':')

//   if (!ivHex || !encryptedHex) {
//     throw new Error('Invalid time trap format.')
//   }

//   const iv = Buffer.from(ivHex, 'hex')
//   const decipher = crypto.createDecipheriv(algorithm, timeTrapSecretKey, iv)
//   let decrypted = decipher.update(encryptedHex, 'hex', 'utf8')
//   decrypted += decipher.final('utf8')

//   const originalTimestamp = parseInt(decrypted, 10)
//   if (isNaN(originalTimestamp)) {
//     throw new Error('Invalid timestamp data.')
//   }

//   const now = Date.now()
//   const timeDiff = now - originalTimestamp
//   const minTimeSeconds = 2 // 2 seconds
//   const maxTimeMinutes = 60 // 1 hour

//   if (timeDiff < minTimeSeconds * 1000 || timeDiff > maxTimeMinutes * 60 * 1000) {
//     console.warn(`Time trap triggered: ${timeDiff / 1000}s`)
//     throw new Error('Invalid submission timing.')
//   }
// } catch (err: any) {
//   console.error('Time trap validation failed:', err.message)
//   throw new ActionError({
//     code: 'BAD_REQUEST',
//     message: 'Invalid request',
//   })
// }
// --- Time Trap Validation End ---
---

<input type="hidden" name="encTimestamp" value={encryptedValue} data-time-trap class="hidden" />