// Copyright 2019 Sorint.lab
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied
// See the License for the specific language governing permissions and
// limitations under the License.

package common

import (
	gitsource "agola.io/agola/internal/gitsources"
	"agola.io/agola/internal/gitsources/gitea"
	"agola.io/agola/internal/gitsources/github"
	"agola.io/agola/internal/gitsources/gitlab"
	cstypes "agola.io/agola/services/configstore/types"

	errors "golang.org/x/xerrors"
)

func newGitea(rs *cstypes.RemoteSource, accessToken string) (*gitea.Client, error) {
	return gitea.New(gitea.Opts{
		APIURL:         rs.APIURL,
		SkipVerify:     rs.SkipVerify,
		Token:          accessToken,
		Oauth2ClientID: rs.Oauth2ClientID,
		Oauth2Secret:   rs.Oauth2ClientSecret,
	})
}

func newGitlab(rs *cstypes.RemoteSource, accessToken string) (*gitlab.Client, error) {
	return gitlab.New(gitlab.Opts{
		APIURL:         rs.APIURL,
		SkipVerify:     rs.SkipVerify,
		Token:          accessToken,
		Oauth2ClientID: rs.Oauth2ClientID,
		Oauth2Secret:   rs.Oauth2ClientSecret,
	})
}

func newGithub(rs *cstypes.RemoteSource, accessToken string) (*github.Client, error) {
	return github.New(github.Opts{
		APIURL:         rs.APIURL,
		SkipVerify:     rs.SkipVerify,
		Token:          accessToken,
		Oauth2ClientID: rs.Oauth2ClientID,
		Oauth2Secret:   rs.Oauth2ClientSecret,
	})
}

func GetAccessToken(rs *cstypes.RemoteSource, userAccessToken, oauth2AccessToken string) (string, error) {
	switch rs.AuthType {
	case cstypes.RemoteSourceAuthTypePassword:
		return userAccessToken, nil
	case cstypes.RemoteSourceAuthTypeOauth2:
		return oauth2AccessToken, nil
	default:
		return "", errors.Errorf("invalid remote source auth type %q", rs.AuthType)
	}
}

func GetGitSource(rs *cstypes.RemoteSource, la *cstypes.LinkedAccount) (gitsource.GitSource, error) {
	var accessToken string
	if la != nil {
		var err error
		accessToken, err = GetAccessToken(rs, la.UserAccessToken, la.Oauth2AccessToken)
		if err != nil {
			return nil, err
		}
	}

	var gitSource gitsource.GitSource
	var err error
	switch rs.Type {
	case cstypes.RemoteSourceTypeGitea:
		gitSource, err = newGitea(rs, accessToken)
	case cstypes.RemoteSourceTypeGitlab:
		gitSource, err = newGitlab(rs, accessToken)
	case cstypes.RemoteSourceTypeGithub:
		gitSource, err = newGithub(rs, accessToken)
	default:
		return nil, errors.Errorf("remote source %s isn't a valid git source", rs.Name)
	}

	return gitSource, err
}

func GetUserSource(rs *cstypes.RemoteSource, accessToken string) (gitsource.UserSource, error) {
	var userSource gitsource.UserSource
	var err error
	switch rs.AuthType {
	case cstypes.RemoteSourceAuthTypeOauth2:
		userSource, err = GetOauth2Source(rs, accessToken)
	case cstypes.RemoteSourceAuthTypePassword:
		userSource, err = GetPasswordSource(rs, accessToken)
	default:
		return nil, errors.Errorf("unknown remote source auth type")
	}

	return userSource, err
}

func GetOauth2Source(rs *cstypes.RemoteSource, accessToken string) (gitsource.Oauth2Source, error) {
	var oauth2Source gitsource.Oauth2Source
	var err error
	switch rs.Type {
	case cstypes.RemoteSourceTypeGitea:
		oauth2Source, err = newGitea(rs, accessToken)
	case cstypes.RemoteSourceTypeGitlab:
		oauth2Source, err = newGitlab(rs, accessToken)
	case cstypes.RemoteSourceTypeGithub:
		oauth2Source, err = newGithub(rs, accessToken)
	default:
		return nil, errors.Errorf("remote source %s isn't a valid oauth2 source", rs.Name)
	}

	return oauth2Source, err
}

func GetPasswordSource(rs *cstypes.RemoteSource, accessToken string) (gitsource.PasswordSource, error) {
	var passwordSource gitsource.PasswordSource
	var err error
	switch rs.Type {
	case cstypes.RemoteSourceTypeGitea:
		passwordSource, err = newGitea(rs, accessToken)
	default:
		return nil, errors.Errorf("remote source %s isn't a valid oauth2 source", rs.Name)
	}

	return passwordSource, err
}