export default async function handler(req, res) {
  const { body, method } = req;

  // Extract the email and captcha code from the request body
  const { email, captcha } = body;

  if (method === 'POST') {
    // If email or captcha are missing return an error
    if (!email || !captcha) {
      return res.status(422).json({
        message: 'Unproccesable request, please provide the required fields',
      });
    }

    try {
      // Ping the hcaptcha verify API to verify the captcha code you received
      const response = await fetch(`https://hcaptcha.com/siteverify`, {
        headers: {
          'Content-Type': 'application/x-www-form-urlencoded; charset=utf-8',
        },
        body: `response=${captcha}&secret=${process.env.NEXT_PUBLIC_HCAPTCHA_SECRET_KEY}`,
        method: 'POST',
      });
      const captchaValidation = await response.json();
      /**
       * {
       *    "success": true|false,     // is the passcode valid, and does it meet security criteria you specified, e.g. sitekey?
       *    "challenge_ts": timestamp, // timestamp of the challenge (ISO format yyyy-MM-dd'T'HH:mm:ssZZ)
       *    "hostname": string,        // the hostname of the site where the challenge was solved
       *    "credit": true|false,      // optional: whether the response will be credited
       *    "error-codes": [...]       // optional: any error codes
       *    "score": float,            // ENTERPRISE feature: a score denoting malicious activity.
       *    "score_reason": [...]      // ENTERPRISE feature: reason(s) for score. See BotStop.com for details.
       *  }
       */
      if (captchaValidation.success) {
        // Replace this with the API that will save the data received
        // to your backend
        // Return 200 if everything is successful
        return res.status(200).send('OK');
      }

      return res.status(422).json({
        message: 'Unproccesable request, Invalid captcha code',
      });
    } catch (error) {
      //console.log(error);
      return res.status(422).json({ message: 'Something went wrong' });
    }
  }
  // Return 404 if someone pings the API with a method other than
  // POST
  return res.status(404).send('Not found');
}