/**
 * <b>ISignOffRestClientBuilder</b>
 *
 * <p>Used to provide {@link RestClient.Builder} instances for building and sending authenticated requests to Atoti servers connected to Sign-Off.
 * This allows for the creation of {@link RestClient} instances with specific configurations for each server, for example, to handle URLS, authentication or custom headers.
 *
 * @author ActiveViam
 */
public interface ISignOffRestClientBuilder {

    /**
     * Get a {@link RestClient.Builder} for the specified server name.
     *
     * @param serverName the name of the server for which to get the {@link RestClient.Builder}.
     * @return a {@link RestClient.Builder} configured for the specified server.
     */
    RestClient.Builder getRestClientBuilder(String serverName);

}

/**
 * <b>SignOffJwtAuthRestClientBuilder</b>
 * <p> Used to provide {@link RestClient.Builder} instances for building and sending JWT authenticated requests to Atoti servers connected to Sign-Off.
 *
 * @author ActiveViam
 */
@RequiredArgsConstructor
public class SignOffJwtAuthRestClientBuilder implements ISignOffRestClientBuilder {

    protected final IRestApiConfiguration restApiConfiguration;
    protected final IJwtService jwtService;
    protected final UserDetailsService userDetailsService;

    protected Map<String, RestClient.Builder> restClientBuilders = new HashMap<>();

    @PostConstruct
    public void init() {
        restApiConfiguration.getServers().forEach(server -> {
            restClientBuilders.put(server, buildJwtRestClientBuilder(server));
        });
    }

    private RestClient.Builder buildJwtRestClientBuilder(String server) {
        String servicePrincipal = restApiConfiguration.getUser(server);
        Collection<String> authorities =
                userDetailsService.loadUserByUsername(servicePrincipal).getAuthorities().stream()
                        .map(GrantedAuthority::getAuthority)
                        .collect(Collectors.toSet());
        String jwt = jwtService.getToken(servicePrincipal, authorities);
        return RestClient.builder().baseUrl(restApiConfiguration.getUrl(server).toString()).defaultHeader(AUTHORIZATION, "Jwt " + jwt);
    }

    @Override
    public RestClient.Builder getRestClientBuilder(String serverName) {
        return restClientBuilders.get(serverName);
    }

}

/**
 * <b>SignOffBasicAuthRestClientBuilder</b>
 * <p> Used to provide {@link RestClient.Builder} instances for building and sending Basic authenticated requests to Atoti servers connected to Sign-Off.
 *
 * @author ActiveViam
 */
@RequiredArgsConstructor
public class SignOffBasicAuthRestClientBuilder implements ISignOffRestClientBuilder {

    protected final IRestApiConfiguration restApiConfiguration;
    protected Map<String, RestClient.Builder> restClientBuilders = new HashMap<>();

    // This cookie spec is used by the application servers (MR/FRTB etc.). If the RestTemplates are not configured to expect this,
    // a WARN log is generated with every response
    protected static final HttpClient STANDARD_COOKIE_CLIENT = HttpClients.custom()
            .setDefaultRequestConfig(RequestConfig.custom()
                    .setCookieSpec(StandardCookieSpec.RELAXED)
                    .build())
            .build();

    @PostConstruct
    public void init() {
        restApiConfiguration.getServers().forEach(server -> {
            RestClient.Builder restClientBuilder = RestClient.builder()
                    .defaultHeaders(headers -> headers.setBasicAuth(restApiConfiguration.getUser(server), restApiConfiguration.getPassword(server)))
                    .baseUrl(restApiConfiguration.getUrl(server).toString())
                    .requestFactory(new HttpComponentsClientHttpRequestFactory(STANDARD_COOKIE_CLIENT));
            restClientBuilders.put(server, restClientBuilder);
        });
    }

    @Override
    public RestClient.Builder getRestClientBuilder(String serverName) {
        return restClientBuilders.get(serverName);
    }

}