// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.

package connect_v1

import (
	"context"
	"net/http"

	"github.com/99designs/gqlgen/graphql"
	"go.gearno.de/kit/log"
	"go.probo.inc/probo/pkg/baseurl"
	"go.probo.inc/probo/pkg/iam"
	"go.probo.inc/probo/pkg/securecookie"
	"go.probo.inc/probo/pkg/server/api/connect/v1/schema"
	"go.probo.inc/probo/pkg/server/api/connect/v1/types"
	"go.probo.inc/probo/pkg/server/gqlutils"
)

func SessionDirective(ctx context.Context, obj any, next graphql.Resolver, required types.SessionRequirement) (any, error) {
	session := SessionFromContext(ctx)
	apiKey := APIKeyFromContext(ctx)

	switch required {
	case types.SessionRequirementOptional:
	case types.SessionRequirementPresent:
		if session == nil && apiKey == nil {
			return nil, gqlutils.Unauthenticatedf(
				ctx,
				"authentication is required to access this resouce",
			)
		}
	case types.SessionRequirementNone:
		if session != nil && apiKey != nil {
			return nil, gqlutils.Invalidf(
				ctx,
				"authentication not allowed for this resource/action",
			)
		}
	}

	return next(ctx)
}

func NewGraphQLHandler(svc *iam.Service, logger *log.Logger, baseURL *baseurl.BaseURL, cookieConfig securecookie.Config) http.Handler {
	config := schema.Config{
		Resolvers: &Resolver{
			authorize:    NewAuthorizeFunc(svc, logger),
			logger:       logger,
			iam:          svc,
			baseURL:      baseURL,
			cookieConfig: cookieConfig,
		},
		Directives: schema.DirectiveRoot{
			Session: SessionDirective,
		},
	}

	es := schema.NewExecutableSchema(config)
	gqlh := gqlutils.NewHandler(es, logger)
	return gqlh
}