package com.airlock.iam.authentication.domain.model.identification;

import com.airlock.iam.authentication.api.domain.model.step.AuthenticationStepResultFactory;
import com.airlock.iam.authentication.domain.model.fido.FidoChallengeSession;
import com.airlock.iam.base.api.domain.model.exception.FailureException;
import com.airlock.iam.base.api.domain.model.mapification.MapifiedValues;
import com.airlock.iam.base.domain.model.mapification.MapifiedValuesBuilder;
import com.airlock.iam.common.domain.service.mapification.Mapifier;
import com.airlock.iam.core.domain.model.authentication.factor.KnownAuthenticationFactor;
import com.airlock.iam.core.domain.model.authentication.factor.KnownAuthenticationFactorDetail;
import com.airlock.iam.factor.domain.model.fido.FidoPublicKeyCredentialRequestOptions;
import com.airlock.iam.flow.api.domain.model.step.StepSession;
import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
import java.util.Optional;
import org.apache.commons.lang3.Validate;

public final class UserIdentifyingFidoStepSession implements FidoChallengeSession, StepSession {
   private static final String ACTIVE_STEP_RESULT = "activeStepResult";
   private static final String OPTIONS_KEY = "options";
   private UserIdentifyingFidoStep.ActiveFidoUserIdentifyingStepResult activeStepResult = UserIdentifyingFidoStep.ActiveFidoUserIdentifyingStepResult.USERNAME;
   private Optional<FidoPublicKeyCredentialRequestOptions> challenge = Optional.empty();

   public UserIdentifyingFidoStep.ActiveFidoUserIdentifyingStepResult getActiveStepResult() {
      return this.activeStepResult;
   }

   public void startUsernameIdentification() {
      this.activeStepResult = UserIdentifyingFidoStep.ActiveFidoUserIdentifyingStepResult.USERNAME;
   }

   public void startFidoAuthentication() {
      this.activeStepResult = UserIdentifyingFidoStep.ActiveFidoUserIdentifyingStepResult.FIDO;
   }

   public AuthenticationStepResultFactory getActiveStepResultFactory() {
      return switch (this.activeStepResult) {
         case USERNAME -> AuthenticationStepResultFactory.forFactor(KnownAuthenticationFactor.USERNAME);
         case FIDO -> AuthenticationStepResultFactory.forFactorDetail(KnownAuthenticationFactorDetail.CRAM_FIDO);
      };
   }

   @Override
   public FidoPublicKeyCredentialRequestOptions getChallenge() {
      return this.challenge.orElseThrow(() -> new FailureException("Challenge should have been initialized"));
   }

   @Override
   public void saveChallenge(FidoPublicKeyCredentialRequestOptions options) {
      Validate.isTrue(this.challenge.isEmpty(), "challenge can only be set once", new Object[0]);
      this.challenge = Optional.of(options);
   }

   @Override
   public MapifiedValues mapify() {
      Mapifier mapifier = Mapifier.getInstance();
      return MapifiedValuesBuilder.mapifiedValues()
         .put("activeStepResult", mapifier.mapify(this.activeStepResult))
         .putIfPresent("options", this.challenge.map(FidoPublicKeyCredentialRequestOptions::mapify))
         .build();
   }

   public static UserIdentifyingFidoStepSession demapify(MapifiedValues values) {
      Mapifier mapifier = Mapifier.getInstance();
      return new UserIdentifyingFidoStepSession(
         values.demapifyValue("activeStepResult", mapifier::demapify), values.demapifyOptional("options", FidoPublicKeyCredentialRequestOptions::demapify)
      );
   }

   @SuppressFBWarnings(justification = "generated code")
   public UserIdentifyingFidoStepSession() {
   }

   @SuppressFBWarnings(justification = "generated code")
   private UserIdentifyingFidoStepSession(
      UserIdentifyingFidoStep.ActiveFidoUserIdentifyingStepResult activeStepResult, Optional<FidoPublicKeyCredentialRequestOptions> challenge
   ) {
      this.activeStepResult = activeStepResult;
      this.challenge = challenge;
   }
}