/*
 * Copyright (c) 2022-2022.
 * Author Peter Placzek (tada5hi)
 * For the full copyright and license information,
 * view the LICENSE file that was distributed with this source code.
 */

import type {
    OAuth2TokenIntrospectionResponse,
} from '@authup/common';
import type { ValidationChain } from 'express-validator';
import {
    body, oneOf, param, query, validationResult,
} from 'express-validator';
import type { Request, Response } from 'routup';
import { send } from 'routup';
import {
    loadOAuth2SubEntity, loadOAuth2SubPermissions,
    readOAuth2TokenPayload, resolveOpenIdClaimsFromSubEntity,
} from '../../../../oauth2';
import { useRequestEnv } from '../../../../utils';
import { RequestValidationError, matchedValidationData } from '../../../../validation';

export async function introspectTokenRouteHandler(
    req: Request,
    res: Response,
) : Promise<any> {
    const chains : ValidationChain[] = [
        body('token'),
        query('token'),
        param('token'),
    ].map((chain) => chain
        .exists()
        .notEmpty()
        .isString()
        .isLength({ min: 16, max: 2048 }));

    await oneOf(chains)
        .run(req);

    const validation = validationResult(req);
    if (!validation.isEmpty() && !useRequestEnv(req, 'token')) {
        throw new RequestValidationError(validation);
    }

    const validationData = matchedValidationData(req, { includeOptionals: true }) as { token: string };
    if (!validationData.token) {
        validationData.token = useRequestEnv(req, 'token');
    }

    const payload = await readOAuth2TokenPayload(validationData.token);
    const permissions = await loadOAuth2SubPermissions(payload.sub_kind, payload.sub, payload.scope);

    const output : OAuth2TokenIntrospectionResponse = {
        active: true,
        permissions,
        ...payload,
        ...resolveOpenIdClaimsFromSubEntity(
            payload.sub_kind,
            await loadOAuth2SubEntity(payload.sub_kind, payload.sub, payload.scope),
        ),
    };

    return send(res, output);
}