package com.airlock.iam.admin.application.service.permission.provider;

import com.airlock.iam.admin.application.configuration.tokens.TokensConfiguration;
import com.airlock.iam.admin.application.service.permission.PagePermissions;
import com.airlock.iam.admin.application.service.permission.PagePermissionsProvider;
import com.airlock.iam.admin.application.system.AdminappPage;
import com.airlock.iam.admin.domain.model.administrator.permissions.Actions;
import com.airlock.iam.admin.domain.service.access.AdminappAccessController;
import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
import java.util.Optional;

public class VascoOtpTokenPermissionsProvider implements PagePermissionsProvider {
   private AdminappAccessController accessController;
   private Optional<TokensConfiguration> config;

   @Override
   public AdminappPage page() {
      return AdminappPage.VASCO_DETAIL;
   }

   @Override
   public boolean applicableInRecoveryMode() {
      return false;
   }

   @Override
   public PagePermissions getPagePermissions() {
      boolean accessible = this.config.isPresent() && this.allowed(Actions.viewToken);
      return PagePermissions.builder()
         .accessible(accessible)
         .defaultPermission(accessible ? PagePermissions.DefaultPermission.WRITE : PagePermissions.DefaultPermission.READ)
         .permission("deleteVascoOtpDevice", this.allowed(Actions.deleteToken))
         .permission("saveVascoOtpDevice", this.allowed(Actions.editToken))
         .permission("synchronizeVascoOtpDevice", this.allowed(Actions.editToken))
         .permission("enableVascoOtpDevice", this.allowed(Actions.activateToken))
         .permission("disableVascoOtpDevice", this.allowed(Actions.deactivateToken))
         .permission("viewAssignees", this.allowed(Actions.listUsers))
         .permission("viewUserDetails", this.allowed(Actions.viewUser))
         .build();
   }

   private boolean allowed(Actions action) {
      return this.accessController.isActionAllowed(action);
   }

   @SuppressFBWarnings(justification = "generated code")
   public VascoOtpTokenPermissionsProvider(AdminappAccessController accessController, Optional<TokensConfiguration> config) {
      this.accessController = accessController;
      this.config = config;
   }
}