package handlers

import (
	"context"
	"log"
	"net/http"
	"tixe/auth"
	"tixe/db"
	"tixe/types"

	"github.com/gin-contrib/sessions"
	"github.com/gin-gonic/gin"
	"github.com/jackc/pgx/v5"
	"github.com/oklog/ulid/v2"
)

func AuthCallback(auth *auth.Auth) gin.HandlerFunc {
	return func(c *gin.Context) {
		session := sessions.Default(c)
		if c.Query("state") != session.Get("state") {
			c.String(http.StatusBadRequest, "Invalid state parameter!")
			return
		}

		token, err := auth.Exchange(c.Request.Context(), c.Query("code"))
		if err != nil {
			c.String(http.StatusUnauthorized, "Failed to exchange authorization code for token!")
			return
		}

		idToken, err := auth.VerifyIDToken(c.Request.Context(), token)
		if err != nil {
			c.String(http.StatusInternalServerError, "Failed to verify ID token!")
			return
		}

		var profile map[string]interface{}
		if err := idToken.Claims(&profile); err != nil {
			log.Printf("[tixe/auth] ERROR: Failed to get claims")
			c.String(http.StatusInternalServerError, "Failed to get claims!")
			return
		}

		// Try to get the relevant details of the user
		var userId, userDisplayName string
		// idToken.Subject should be unique and should not change.
		// I think. Maybe. Possibly. Hopefully.
		scanErr := db.PgPool.QueryRow(context.Background(),
			"SELECT id, display_name FROM users WHERE oidc_subject = $1", idToken.Subject).Scan(&userId, &userDisplayName)
		if scanErr == pgx.ErrNoRows {
			log.Printf("[tixe/auth] New user detected logging in, creating entry in database")
			// The user does not exist in the db, create it
			userId = ulid.Make().String()
			userDisplayName = profile["name"].(string)
			_, err = db.PgPool.Exec(context.Background(),
				"INSERT INTO users(id, display_name, oidc_subject) VALUES($1, $2, $3)",
				userId, userDisplayName, idToken.Subject)
			if err != nil {
				log.Printf("[tixe/auth] ERROR: Could not create database entry for oidc user")
				c.String(http.StatusInternalServerError, "Could not create database entry for oidc user")
				return
			}
		} else if scanErr != nil {
			// scanErr was some other error than ErrNoRows
			log.Printf("[tixe/auth] ERROR: Could not query database for oidc user: %v", scanErr)
			c.String(http.StatusInternalServerError, "Could not query database for oidc user")
			return
		}

		// The user.Id field is read in other requests to read user data from the db
		session.Set("user", types.User { Id: userId, DisplayName: userDisplayName })
		session.Set("access_token", token.AccessToken)
		session.Set("profile", profile)
		if err := session.Save(); err != nil {
			log.Printf("[tixe/auth] ERROR: Failed to save session: %v", err)
			c.String(http.StatusInternalServerError, "Failed to save session!")
			return
		}

		c.Redirect(http.StatusTemporaryRedirect, "/")
	}
}