package complianceportal_v1

// This file will be automatically regenerated based on the schema, any resolver
// implementations
// will be copied through when generating and any unknown code will be moved to the end.
// Code generated by github.com/99designs/gqlgen version v0.17.94

import (
	"context"
	"time"

	"go.gearno.de/kit/log"
	"go.probo.inc/probo/pkg/coredata"
	"go.probo.inc/probo/pkg/esign"
	"go.probo.inc/probo/pkg/server/api/authn"
	"go.probo.inc/probo/pkg/server/api/clientip"
	"go.probo.inc/probo/pkg/server/api/complianceportal"
	"go.probo.inc/probo/pkg/server/api/complianceportal/v1/schema"
	"go.probo.inc/probo/pkg/server/api/complianceportal/v1/types"
	"go.probo.inc/probo/pkg/server/gqlutils"
)

// AcceptElectronicSignature is the resolver for the acceptElectronicSignature field.
func (r *mutationResolver) AcceptElectronicSignature(ctx context.Context, input types.AcceptElectronicSignatureInput) (*types.AcceptElectronicSignaturePayload, error) {
	var (
		identity         = authn.IdentityFromContext(ctx)
		httpReq          = gqlutils.HTTPRequestFromContext(ctx)
		compliancePortal = complianceportal.CompliancePortalFromContext(ctx)
	)

	signerIP := clientip.Extract(httpReq)

	scope := coredata.NewScopeFromObjectID(compliancePortal.ID)

	signature, err := r.esign.AcceptSignature(
		ctx,
		scope,
		&esign.AcceptSignatureRequest{
			SignatureID:    input.SignatureID,
			SignerFullName: identity.FullName,
			SignerEmail:    identity.EmailAddress,
			SignerIPAddr:   signerIP,
			SignerUA:       httpReq.UserAgent(),
		},
	)
	if err != nil {
		r.logger.ErrorCtx(ctx, "cannot accept electronic signature", log.Error(err))
		return nil, gqlutils.Internal(ctx)
	}

	return &types.AcceptElectronicSignaturePayload{
		Signature: types.NewElectronicSignature(signature),
	}, nil
}

// RecordSigningEvent is the resolver for the recordSigningEvent field.
func (r *mutationResolver) RecordSigningEvent(ctx context.Context, input types.RecordSigningEventInput) (*types.RecordSigningEventPayload, error) {
	var (
		identity         = authn.IdentityFromContext(ctx)
		httpReq          = gqlutils.HTTPRequestFromContext(ctx)
		compliancePortal = complianceportal.CompliancePortalFromContext(ctx)
	)

	actorIP := clientip.Extract(httpReq)

	scope := coredata.NewScopeFromObjectID(compliancePortal.ID)

	if err := r.esign.RecordEvent(
		ctx,
		scope,
		&esign.RecordEventRequest{
			SignatureID: input.SignatureID,
			EventType:   input.EventType,
			EventSource: coredata.ElectronicSignatureEventSourceClient,
			ActorEmail:  identity.EmailAddress,
			ActorIPAddr: actorIP,
			ActorUA:     httpReq.UserAgent(),
		},
	); err != nil {
		r.logger.ErrorCtx(ctx, "cannot record signing event", log.Error(err))
		return nil, gqlutils.Internal(ctx)
	}

	return &types.RecordSigningEventPayload{Success: true}, nil
}

// FileURL is the resolver for the fileUrl field.
func (r *nonDisclosureAgreementResolver) FileURL(ctx context.Context, obj *types.NonDisclosureAgreement) (string, error) {
	compliancePortal := complianceportal.CompliancePortalFromContext(ctx)

	if identity := authn.IdentityFromContext(ctx); identity != nil && r.esign != nil {
		scope := coredata.NewScopeFromObjectID(compliancePortal.ID)
		visitorService := r.visitor

		access, err := visitorService.GetPortalAccess(ctx, scope, compliancePortal.ID, identity.ID)
		if err == nil && access.ElectronicSignatureID != nil {
			fileURL, err := r.esign.GenerateSignatureFileURL(ctx, *access.ElectronicSignatureID, 15*time.Minute)
			if err == nil {
				return fileURL, nil
			}

			r.logger.ErrorCtx(ctx, "cannot generate signature file URL, falling back to original NDA", log.Error(err))
		}
	}

	scope := coredata.NewScopeFromObjectID(compliancePortal.ID)
	visitorService := r.visitor

	fileURL, err := visitorService.GeneratePortalNDAFileURL(ctx, scope, compliancePortal.ID, 15*time.Minute)
	if err != nil {
		return "", gqlutils.Internal(ctx)
	}

	return fileURL, nil
}

// ViewerSignature is the resolver for the viewerSignature field.
func (r *nonDisclosureAgreementResolver) ViewerSignature(ctx context.Context, obj *types.NonDisclosureAgreement) (*types.ElectronicSignature, error) {
	identity := authn.IdentityFromContext(ctx)
	if identity == nil {
		return nil, nil
	}

	compliancePortal := complianceportal.CompliancePortalFromContext(ctx)
	scope := coredata.NewScopeFromObjectID(compliancePortal.ID)
	visitorService := r.visitor

	access, err := visitorService.GetPortalAccess(ctx, scope, compliancePortal.ID, identity.ID)
	if err != nil {
		return nil, nil
	}

	if access.ElectronicSignatureID == nil {
		return nil, nil
	}

	sig, err := r.esign.GetSignatureByID(ctx, scope, *access.ElectronicSignatureID)
	if err != nil {
		return nil, nil
	}

	return types.NewElectronicSignature(sig), nil
}

// NonDisclosureAgreement returns schema.NonDisclosureAgreementResolver implementation.
func (r *Resolver) NonDisclosureAgreement() schema.NonDisclosureAgreementResolver {
	return &nonDisclosureAgreementResolver{r}
}

type nonDisclosureAgreementResolver struct{ *Resolver }