import { Request, Response, Router } from "express";
import Stacker from "../middlewares/stacker";
import {
   GetClientAuthMiddleware,
   GetClientApiAuthMiddleware,
} from "../middlewares/client";
import { GetUserMiddleware } from "../middlewares/user";
import { createJWT } from "../../keys";
import Client from "../../models/client";
import RequestError, { HttpStatusCode } from "../../helper/request_error";
import config from "../../config";
import Mail from "../../models/mail";

const ClientRouter = Router();

/**
 * @api {get} /client/user
 *
 * @apiDescription Can be used for simple authentication of user. It will redirect the user to the redirect URI with a very short lived jwt.
 *
 * @apiParam {String} redirect_uri URL to redirect to on success
 * @apiParam {String} state A optional state, that will be included in the JWT and redirect_uri as parameter
 *
 * @apiName ClientUser
 * @apiGroup client
 *
 * @apiPermission user_client Requires ClientID and Authenticated User
 */
ClientRouter.get(
   "/user",
   Stacker(
      GetClientAuthMiddleware(false),
      GetUserMiddleware(false, false),
      async (req: Request, res: Response) => {
         let { redirect_uri, state } = req.query;

         if (redirect_uri !== req.client.redirect_url)
            throw new RequestError(
               "Invalid redirect URI",
               HttpStatusCode.BAD_REQUEST
            );

         let jwt = await createJWT(
            {
               client: req.client.client_id,
               uid: req.user.uid,
               username: req.user.username,
               state: state,
            },
            {
               expiresIn: 30,
               issuer: config.core.url,
               algorithm: "RS256",
               subject: req.user.uid,
               audience: req.client.client_id,
            }
         ); //after 30 seconds this token is invalid
         res.redirect(
            redirect_uri + "?jwt=" + jwt + (state ? `&state=${state}` : "")
         );
      }
   )
);

ClientRouter.get(
   "/account",
   Stacker(GetClientApiAuthMiddleware(), async (req: Request, res) => {
      let mails = await Promise.all(
         req.user.mails.map((id) => Mail.findById(id))
      );

      let mail = mails.find((e) => e.primary) || mails[0];

      res.json({
         user: {
            username: req.user.username,
            name: req.user.name,
            email: mail,
         },
      });
   })
);

export default ClientRouter;