package main

import (
	"context"
	"encoding/json"
	"fmt"
	"io"
	"net/http"
	"strings"
	"time"

	"github.com/golang-jwt/jwt/v5"
)

var MySigningKey = []byte("COUCOU")

type LoginInformation struct {
	Email    string `json:"email"`
	Password string `json:"password"`
}

type Claims struct {
	UserID string `json:"user_id"`
	jwt.RegisteredClaims
}

func HandleLogin(w http.ResponseWriter, r *http.Request) {
	if r.Method != http.MethodPost {
		JSONError{
			Status:  Error,
			Message: "Method is not allowed",
		}.Respond(w, http.StatusMethodNotAllowed)
		return
	}

	if r.Body == nil {
		JSONError{
			Status:  Error,
			Message: "No body has been provided.",
		}.Respond(w, http.StatusNoContent)
		return
	}

	body, err := io.ReadAll(r.Body)
	if err != nil {
		JSONError{
			Status:  Error,
			Message: err.Error(),
		}.Respond(w, http.StatusNoContent)
		return
	}
	var login LoginInformation
	err = json.Unmarshal(body, &login)
	if err != nil {
		JSONError{
			Status:  Error,
			Message: err.Error(),
		}.Respond(w, http.StatusNoContent)
		return
	}

	var user User
	err = DB.NewSelect().
		Model(&user).
		Where("email = ? AND password = ?", login.Email, login.Password).
		Limit(1).
		Scan(context.Background())

	if err != nil {
		JSONError{
			Status:  Error,
			Message: err.Error(),
		}.Respond(w, http.StatusNoContent)
		return
	}

	claims := Claims{
		UserID: user.UserID.String(),
		RegisteredClaims: jwt.RegisteredClaims{
			Issuer:    "latosa-escrima.fr",
			Subject:   "authentification",
			ExpiresAt: jwt.NewNumericDate(time.Now().Add(time.Hour * 24)),
			IssuedAt:  jwt.NewNumericDate(time.Now()),
		},
	}

	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
	signed, err := token.SignedString([]byte("hello"))
	if err != nil {
		JSONError{
			Status:  Error,
			Message: err.Error(),
		}.Respond(w, http.StatusNoContent)
		return
	}

	JSONSuccess{
		Status:  Success,
		Message: "JWT Created",
		Data:    map[string]string{"jwt": signed},
	}.Respond(w, http.StatusCreated)
}

func AuthJWT(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		// Check if the Authorization header is provided
		fmt.Println("Coucou")
		authHeader := r.Header.Get("Authorization")
		if authHeader == "" {
			JSONError{
				Status:  Error,
				Message: "Missing Authorization header",
			}.Respond(w, http.StatusUnauthorized)
			return
		}

		// Bearer token is expected, so split the header into "Bearer <token>"
		tokenString := strings.TrimPrefix(authHeader, "Bearer ")
		if tokenString == authHeader {
			JSONError{
				Status:  Error,
				Message: "Invalid Authorization header format",
			}.Respond(w, http.StatusUnauthorized)
			return
		}

		// Parse the token
		token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
			// Ensure that the token's signing method is valid
			if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
				return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
			}
			return MySigningKey, nil
		})

		if err != nil || !token.Valid {
			JSONError{
				Status:  Error,
				Message: "Invalid Token",
			}.Respond(w, http.StatusUnauthorized)
			return
		}

		// Call the next handler if the JWT is valid
		next.ServeHTTP(w, r)
	})
}