<?php

namespace App\Controller\Api;

use App\BusProNet\ApiClient;
use App\BusProNet\Exception\ApiClientException;
use App\BusProNet\Model\Notification;
use App\BusProNet\Model\PersonalData;
use App\Entity\User;
use App\Security\Crypt;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Attribute\Route;
use Symfony\Component\Security\Http\Attribute\IsGranted;

#[Route('/api')]
#[IsGranted('ROLE_OAUTH2_EMAIL')]
class UserinfoController extends AbstractController
{
    public function __construct(private readonly ApiClient $apiClient, private readonly Crypt $crypt)
    {
    }

    #[Route('/userinfo', name: 'api_userinfo', methods: ['GET'])]
    public function index(): JsonResponse
    {
        // basic scopes applicable to all authenticated users
        $scopes = ['email'];

        // extend scopes depending on granted permissions
        if ($this->isGranted('ROLE_OAUTH2_ID')) {
            $scopes[] = 'id';
        }
        if ($this->isGranted('ROLE_OAUTH2_PROFILE')) {
            $scopes[] = 'profile';
        }
        if ($this->isGranted('ROLE_OAUTH2_ROLES')) {
            $scopes[] = 'roles';
        }

        /** @var User $user */
        $user = $this->getUser();
        $email = $user->getEmail();
        $password = $this->crypt->decrypt($user->getPassword());

        try {
            $data = $this->apiClient->getPersonalData($email, $password);

            if ($data instanceof Notification) {
                return new JsonResponse(['message' => $data->message, 'code' => $data->code], Response::HTTP_BAD_REQUEST);
            }

            // Patch current user's roles
            $data->roles = $user->getRoles();

            // extract userdata for resulting claims
            $userData = $this->getClaims($data, $scopes);

            return $this->json($userData);
        } catch (ApiClientException $e) {
            return new JsonResponse(['message' => $e->getMessage()], Response::HTTP_BAD_REQUEST);
        }
    }

    private function getClaims(PersonalData $data, array $scopes): array
    {
        // get all available claims
        $allClaims = $data->getClaims();
        $keys = array_keys($allClaims);
        $claims = [];

        // filter claims by provided scopes
        foreach ($scopes as $scope) {
            if (false === in_array($scope, $keys)) {
                continue;
            }
            $claims[$scope] = $allClaims[$scope];
        }

        return $claims;
    }
}