package com.airlock.iam.flow.shared.domain.model.condition;

import com.airlock.iam.base.api.domain.model.plugin.LogicForConfig;
import com.airlock.iam.base.api.domain.model.store.exception.StoreFailureException;
import com.airlock.iam.common.api.domain.model.persistency.exception.PersisterException;
import com.airlock.iam.common.api.domain.model.user.User;
import com.airlock.iam.core.misc.persistency.CredentialBean;
import com.airlock.iam.flow.api.domain.model.step.FlowCondition;
import com.airlock.iam.flow.shared.application.configuration.condition.OathOtpCredentialConditionConfig;
import jakarta.inject.Inject;
import jakarta.inject.Provider;

@LogicForConfig(OathOtpCredentialConditionConfig.class)
public class OathOtpCredentialCondition implements FlowCondition {
   private final Provider<User> user;
   private final OathOtpCredentialConditionConfig config;

   @Inject
   public OathOtpCredentialCondition(Provider<User> user, OathOtpCredentialConditionConfig config) {
      this.user = user;
      this.config = config;
   }

   @Override
   public boolean isFulfilled() {
      return this.loadOathOtpCredential().hasCurrentData();
   }

   private CredentialBean loadOathOtpCredential() {
      try {
         return this.config.getOathOtpSettings().getCredentialPersister().getPersistentCredentialByUsername(this.user().getName());
      } catch (PersisterException e) {
         throw new StoreFailureException(e);
      }
   }

   private User user() {
      return (User)this.user.get();
   }

   @Override
   public String displayName() {
      return "Has OATH OTP Device";
   }
}