package com.airlock.iam.ssi.infrastructure.factory;

import com.airlock.iam.base.api.infrastructure.plugin.ModuleForConfig;
import com.airlock.iam.common.api.domain.model.authmethod.AuthenticationMethod;
import com.airlock.iam.common.domain.model.transform.UsernameTransformerUsernameTransformation;
import com.airlock.iam.core.misc.impl.authen.AuthenticationMethodFactory;
import com.airlock.iam.flow.api.domain.model.session.FlowSession;
import com.airlock.iam.flow.infrastructure.step.StepSessionModuleHelper;
import com.airlock.iam.ssi.application.configuration.step.SsiPasswordlessAuthenticationStepConfig;
import com.airlock.iam.ssi.domain.model.step.IssuerId;
import com.airlock.iam.ssi.domain.model.step.ProofRequestParameters;
import com.airlock.iam.ssi.domain.model.step.ProofSchema;
import com.airlock.iam.ssi.domain.model.step.SsiAttributeSettings;
import com.airlock.iam.ssi.domain.model.step.SsiAuthenticationStepSession;
import com.airlock.iam.ssi.domain.model.step.SsiAuthenticationStepSettings;
import com.airlock.iam.ssi.domain.model.step.SsiClaimSettings;
import com.google.inject.Exposed;
import com.google.inject.PrivateModule;
import com.google.inject.Provides;
import java.util.List;
import java.util.Optional;
import java.util.stream.Stream;

@ModuleForConfig(SsiPasswordlessAuthenticationStepConfig.class)
public final class SsiPasswordlessAuthenticationStepModule extends PrivateModule {
   @Exposed
   @Provides
   SsiAuthenticationStepSession provideSsiAuthenticationStepSession(FlowSession flowSession) {
      return StepSessionModuleHelper.retrieveStepSession(flowSession, SsiAuthenticationStepSession.class);
   }

   @Exposed
   @Provides
   SsiAuthenticationStepSettings provideSsiAuthenticationStepSettings(SsiPasswordlessAuthenticationStepConfig config) {
      SsiClaimSettings userClaimSettings = toUserClaimSettings(config);
      List<SsiClaimSettings> allClaimSettings = Stream.concat(toAdditionalClaimSettings(config).stream(), Stream.of(userClaimSettings)).toList();
      return new SsiAuthenticationStepSettings(
         getUserAttributeSettings(config),
         new ProofRequestParameters(new ProofSchema(config.getProofSchemaName()), allClaimSettings),
         true,
         new UsernameTransformerUsernameTransformation(config.getUsernameTransformers())
      );
   }

   @Exposed
   @Provides
   AuthenticationMethod provideAuthenticationMethod(SsiPasswordlessAuthenticationStepConfig config) {
      return AuthenticationMethodFactory.authMethodFor(config.getAuthenticationMethodId());
   }

   private static List<SsiClaimSettings> toAdditionalClaimSettings(SsiPasswordlessAuthenticationStepConfig config) {
      return config.getAdditionalClaims().stream().map(SsiClaimSettingsHelper::toClaimSettings).toList();
   }

   private static SsiClaimSettings toUserClaimSettings(SsiPasswordlessAuthenticationStepConfig config) {
      SsiAttributeSettings userAttributeSettings = getUserAttributeSettings(config);
      List<IssuerId> trustedIssuers = config.getTrustedIssuers().stream().map(IssuerId::new).toList();
      return SsiClaimSettings.builder()
         .requestedAttributes(List.of(userAttributeSettings))
         .trustedIssuers(trustedIssuers)
         .schemaName(config.getCredentialSchemaName())
         .build();
   }

   private static SsiAttributeSettings getUserAttributeSettings(SsiPasswordlessAuthenticationStepConfig config) {
      return new SsiAttributeSettings(config.getUserNameAttribute().getName(), getUserIdentifyingAttributeProviderKey(config));
   }

   private static String getUserIdentifyingAttributeProviderKey(SsiPasswordlessAuthenticationStepConfig config) {
      return Optional.ofNullable(config.getUserNameAttribute().getProviderKey()).orElse(config.getUserNameAttribute().getName());
   }

   protected void configure() {
   }
}