package auth

import (
	"time"

	"github.com/gofiber/fiber/v2"
	"github.com/golang-jwt/jwt/v4"
	"golang.org/x/crypto/bcrypt"

	"git.dmitriygnatenko.ru/dima/dmitriygnatenko-v2/internal/models"
)

const (
	ClaimNameKey = "name"
	claimUserKey = "user"
	claimExpKey  = "exp"
	defaultCost  = bcrypt.DefaultCost
)

type Env interface {
	JwtSecretKey() string
	JwtLifeTime() time.Duration
}

type Service struct {
	env Env
}

func Init(env Env) (*Service, error) {
	return &Service{env: env}, nil
}

func (a Service) GeneratePasswordHash(password string) (string, error) {
	res, err := bcrypt.GenerateFromPassword([]byte(password), defaultCost)
	if err != nil {
		return "", err
	}

	return string(res), nil
}

func (a Service) IsCorrectPassword(password string, hash string) bool {
	return bcrypt.CompareHashAndPassword([]byte(hash), []byte(password)) == nil
}

func (a Service) GetClaims(fctx *fiber.Ctx) jwt.MapClaims {
	jwtUser := fctx.Locals(claimUserKey).(*jwt.Token)
	claims := jwtUser.Claims.(jwt.MapClaims)

	return claims
}

func (a Service) GenerateToken(user models.User) (string, error) {
	claims := jwt.MapClaims{
		ClaimNameKey: user.Username,
		claimExpKey:  time.Now().Add(a.env.JwtLifeTime() * time.Second).Unix(),
	}

	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)

	return token.SignedString([]byte(a.env.JwtSecretKey()))
}