package com.airlock.iam.admin.domain.model.token.airlock2fa;

import com.airlock.iam.admin.api.domain.model.administrator.CurrentAdministrator;
import com.airlock.iam.admin.api.domain.model.user.AuthenticationMethods;
import com.airlock.iam.admin.api.domain.service.user.ManagedUserRepository;
import com.airlock.iam.admin.domain.model.authmethod.AuthenticationMethod;
import com.airlock.iam.airlock2fa.api.domain.model.Airlock2FAAccountId;
import com.airlock.iam.base.api.domain.model.user.UserId;
import com.airlock.iam.factor.domain.model.airlock2fa.Airlock2FAAccountDisplayName;
import com.airlock.iam.factor.domain.model.airlock2fa.order.Airlock2FAActivationLetterOrderCreator;
import com.airlock.iam.factor.domain.service.airlock2fa.Airlock2FAAdminApiUserAccountService;
import com.airlock.iam.factor.domain.service.airlock2fa.activation.Airlock2FAActivationLetterOrderService;
import com.airlock.iam.factor.domain.service.airlock2fa.displayname.Airlock2FAAccountDisplayNameProvider;
import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
import java.util.Optional;
import lombok.NonNull;
import org.apache.commons.lang3.Validate;

public final class Airlock2FAAuthenticationMethod implements AuthenticationMethod {
   public static final String AUTH_METHOD_ID = "AIRLOCK_2FA";
   public static final AuthenticationMethod.TokenType TOKEN_TYPE = AuthenticationMethod.TokenType.tokenType("AIRLOCK_2FA");
   private final AuthenticationMethods.AuthenticationMethodId configuredId;
   private final Airlock2FAAdminApiUserAccountService userCreateService;
   private final Optional<Airlock2FAActivationLetterOrderService> letterOrderService;
   private final CurrentAdministrator administrator;
   private final Airlock2FAAccountDisplayNameProvider displayNameProvider;
   private final ManagedUserRepository userRepository;
   private final boolean autoOrder;

   public Airlock2FAAuthenticationMethod(
      @NonNull AuthenticationMethods.AuthenticationMethodId configuredId,
      @NonNull Airlock2FAAdminApiUserAccountService userCreateService,
      @NonNull Optional<Airlock2FAActivationLetterOrderService> letterOrderService,
      @NonNull CurrentAdministrator administrator,
      @NonNull Airlock2FAAccountDisplayNameProvider displayNameProvider,
      ManagedUserRepository userRepository,
      boolean autoOrder
   ) {
      if (configuredId == null) {
         throw new NullPointerException("configuredId is marked non-null but is null");
      }

      if (userCreateService == null) {
         throw new NullPointerException("userCreateService is marked non-null but is null");
      }

      if (letterOrderService == null) {
         throw new NullPointerException("letterOrderService is marked non-null but is null");
      }

      if (administrator == null) {
         throw new NullPointerException("administrator is marked non-null but is null");
      }

      if (displayNameProvider == null) {
         throw new NullPointerException("displayNameProvider is marked non-null but is null");
      }

      this.userRepository = userRepository;
      Validate.isTrue(!autoOrder || letterOrderService.isPresent(), "auto order requires the activation letter order service", new Object[0]);
      this.configuredId = configuredId;
      this.userCreateService = userCreateService;
      this.letterOrderService = letterOrderService;
      this.autoOrder = autoOrder;
      this.administrator = administrator;
      this.displayNameProvider = displayNameProvider;
   }

   @Override
   public AuthenticationMethod.TokenType getTokenType() {
      return TOKEN_TYPE;
   }

   @Override
   public boolean isAllowedAsActiveAuthMethodForUser(UserId userId) {
      return this.hasAirlock2FAAccount(userId);
   }

   @Override
   public boolean isAllowedAsNextAuthMethod() {
      return true;
   }

   @Override
   public boolean isAllowedAsNewAuthMethod(UserId userId) {
      return !this.hasAirlock2FAAccount(userId);
   }

   @Override
   public boolean isVisible(UserId userId) {
      return this.hasAirlock2FAAccount(userId);
   }

   private boolean hasAirlock2FAAccount(UserId userId) {
      return this.userCreateService.hasAccount(userId);
   }

   @Override
   public Optional<AuthenticationMethod.AddAuthMethodErrorCode> addToUser(UserId userId) {
      Optional<Airlock2FAAccountDisplayName> displayName = this.userRepository.findById(userId).flatMap(this.displayNameProvider::accountDisplayName);
      Airlock2FAAccountId accountId = this.userCreateService.createAccount(userId, displayName);
      if (this.autoOrder) {
         Airlock2FAActivationLetterOrderCreator orderCreator = Airlock2FAActivationLetterOrderCreator.orderCreator(UserId.userId(this.administrator.getName()));
         this.letterOrderService.orElseThrow().createOrder(accountId, orderCreator);
      }

      return Optional.empty();
   }

   @Override
   public void handleUserCreated(UserId userId) {
   }

   @SuppressFBWarnings(justification = "generated code")
   public static Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder builder() {
      return new Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder();
   }

   @SuppressFBWarnings(justification = "generated code")
   @Override
   public AuthenticationMethods.AuthenticationMethodId getConfiguredId() {
      return this.configuredId;
   }

   @SuppressFBWarnings(justification = "generated code")
   public static class Airlock2FAAuthenticationMethodBuilder {
      @SuppressFBWarnings(justification = "generated code")
      private AuthenticationMethods.AuthenticationMethodId configuredId;
      @SuppressFBWarnings(justification = "generated code")
      private Airlock2FAAdminApiUserAccountService userCreateService;
      @SuppressFBWarnings(justification = "generated code")
      private Optional<Airlock2FAActivationLetterOrderService> letterOrderService;
      @SuppressFBWarnings(justification = "generated code")
      private CurrentAdministrator administrator;
      @SuppressFBWarnings(justification = "generated code")
      private Airlock2FAAccountDisplayNameProvider displayNameProvider;
      @SuppressFBWarnings(justification = "generated code")
      private ManagedUserRepository userRepository;
      @SuppressFBWarnings(justification = "generated code")
      private boolean autoOrder;

      @SuppressFBWarnings(justification = "generated code")
      Airlock2FAAuthenticationMethodBuilder() {
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder configuredId(
         @NonNull AuthenticationMethods.AuthenticationMethodId configuredId
      ) {
         if (configuredId == null) {
            throw new NullPointerException("configuredId is marked non-null but is null");
         }

         this.configuredId = configuredId;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder userCreateService(
         @NonNull Airlock2FAAdminApiUserAccountService userCreateService
      ) {
         if (userCreateService == null) {
            throw new NullPointerException("userCreateService is marked non-null but is null");
         }

         this.userCreateService = userCreateService;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder letterOrderService(
         @NonNull Optional<Airlock2FAActivationLetterOrderService> letterOrderService
      ) {
         if (letterOrderService == null) {
            throw new NullPointerException("letterOrderService is marked non-null but is null");
         }

         this.letterOrderService = letterOrderService;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder administrator(@NonNull CurrentAdministrator administrator) {
         if (administrator == null) {
            throw new NullPointerException("administrator is marked non-null but is null");
         }

         this.administrator = administrator;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder displayNameProvider(
         @NonNull Airlock2FAAccountDisplayNameProvider displayNameProvider
      ) {
         if (displayNameProvider == null) {
            throw new NullPointerException("displayNameProvider is marked non-null but is null");
         }

         this.displayNameProvider = displayNameProvider;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder userRepository(ManagedUserRepository userRepository) {
         this.userRepository = userRepository;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder autoOrder(boolean autoOrder) {
         this.autoOrder = autoOrder;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public Airlock2FAAuthenticationMethod build() {
         return new Airlock2FAAuthenticationMethod(
            this.configuredId,
            this.userCreateService,
            this.letterOrderService,
            this.administrator,
            this.displayNameProvider,
            this.userRepository,
            this.autoOrder
         );
      }

      @SuppressFBWarnings(justification = "generated code")
      @Override
      public String toString() {
         return "Airlock2FAAuthenticationMethod.Airlock2FAAuthenticationMethodBuilder(configuredId="
            + this.configuredId
            + ", userCreateService="
            + this.userCreateService
            + ", letterOrderService="
            + this.letterOrderService
            + ", administrator="
            + this.administrator
            + ", displayNameProvider="
            + this.displayNameProvider
            + ", userRepository="
            + this.userRepository
            + ", autoOrder="
            + this.autoOrder
            + ")";
      }
   }
}