{{={= =}=}}
import type { Request as ExpressRequest } from 'express'
import { type ProviderId, type CreateUserResult, type FindAuthWithUserResult } from '../../auth/utils.js'
import { prisma } from '../index.js'
import { Expand } from '../../universal/types.js'

// PUBLIC API
export type OnBeforeSignupHook = (
  params: Expand<OnBeforeSignupHookParams>,
) => void | Promise<void>

// PUBLIC API
export type OnAfterSignupHook = (
  params: Expand<OnAfterSignupHookParams>,
) => void | Promise<void>

// PUBLIC API
/**
 * Use this type for typing your `onAfterEmailVerified` hook.
 * 
 * Wasp calls this hook exactly once, after a user successfully verifies their email during the email verification flow.
 * 
 * @example
 * ```ts
 * export const onAfterEmailVerified: OnAfterEmailVerifiedHook = async ({
 *   email,
 * }) => {
 *   await emailSender.send({
 *     to: email,
 *     subject: 'Welcome to our platform!',
 *     text: `Your email ${email} has been verified successfully.`
 *   })
 * }
 * ```
 */
export type OnAfterEmailVerifiedHook = (
  params: Expand<OnAfterEmailVerifiedHookParams>,
) => void | Promise<void>

// PUBLIC API
/**
 * @returns Object with a URL that the OAuth flow should redirect to.
 */
export type OnBeforeOAuthRedirectHook = (
  params: Expand<OnBeforeOAuthRedirectHookParams>,
) => { url: URL } | Promise<{ url: URL }>

// PUBLIC API
export type OnBeforeLoginHook = (
  params: Expand<OnBeforeLoginHookParams>,
) => void | Promise<void>

// PUBLIC API
export type OnAfterLoginHook = (
  params: Expand<OnAfterLoginHookParams>,
) => void | Promise<void>

// PRIVATE API (used in the SDK and the server)
export type InternalAuthHookParams = {
  /**
   * Prisma instance that can be used to interact with the database.
  */
  prisma: typeof prisma
}

// NOTE: We should be exporting types that can be reached by users via other
// exported types (e.g. using the Parameters<T> Typescript helper).
// However, we are not exporting this type to keep the API surface smaller.
// This type is only used internally by the SDK. Exporting it might confuse
// users since the name is too similar to the exported function type.
// Same goes for all other *Params types in this file.
type OnBeforeSignupHookParams = {
  /**
   * Provider ID object that contains the provider name and the provider user ID.
  */
  providerId: ProviderId
  /**
   * Request object that can be used to access the user's incoming signup request.
  */
  req: ExpressRequest
} & InternalAuthHookParams

type OnAfterSignupHookParams = {
  /**
   * Provider ID object that contains the provider name and the provider user ID.
  */
  providerId: ProviderId
  /**
   * User object that was created during the signup process.
  */
  user: CreateUserResult
  /**
   * OAuth flow data that was generated during the OAuth flow. This is only
   * available if the user signed up using OAuth.
  */
  oauth?: OAuthData
  /**
   * Request object that can be used to access the user's incoming signup request.
  */
  req: ExpressRequest
} & InternalAuthHookParams

type OnAfterEmailVerifiedHookParams = {
  /**
   * The email address that was verified.
  */
  email: string
  /**
   * The user who completed email verification.
  */
  user: FindAuthWithUserResult['user']
  /**
   * Request object that can be used to access the user's incoming verification request.
   */
  req: ExpressRequest
} & InternalAuthHookParams

type OnBeforeOAuthRedirectHookParams = {
  /**
   * URL that the OAuth flow should redirect to.
  */
  url: URL
  /**
   * Unique request ID that was generated during the OAuth flow.
  */
  oauth: Pick<OAuthData, 'uniqueRequestId'>
  /**
   * Request object that can be used to access the user's incoming OAuth flow request.
  */
  req: ExpressRequest
} & InternalAuthHookParams

type OnBeforeLoginHookParams = {
  /**
   * Provider ID object that contains the provider name and the provider user ID.
  */
  providerId: ProviderId
  /**
   * User that is trying to log in.
  */
  user: FindAuthWithUserResult['user']
  /**
   * Request object that can be used to access the user's incoming login request.
  */
  req: ExpressRequest
} & InternalAuthHookParams

type OnAfterLoginHookParams = {
  /**
   * Provider ID object that contains the provider name and the provider user ID.
  */
  providerId: ProviderId
  /**
   * User that is logged in.
  */
  user: FindAuthWithUserResult['user']
  /**
   * OAuth flow data that was generated during the OAuth flow. This is only
   * available if the user logged in using OAuth.
  */
  oauth?: OAuthData
  /**
   * Request object that can be used to access the user's incoming login request.
  */
  req: ExpressRequest
} & InternalAuthHookParams

// PUBLIC API
export type OAuthData = {
  /**
   * Unique request ID that was generated during the OAuth flow.
  */
  uniqueRequestId: string
} & (
  {=# enabledProviders.isGoogleAuthEnabled =}
  | { providerName: 'google'; tokens: import('arctic').GoogleTokens } 
  {=/ enabledProviders.isGoogleAuthEnabled =}
  {=# enabledProviders.isDiscordAuthEnabled =}
  | { providerName: 'discord'; tokens: import('arctic').DiscordTokens }
  {=/ enabledProviders.isDiscordAuthEnabled =}
  {=# enabledProviders.isGitHubAuthEnabled =}
  | { providerName: 'github'; tokens: import('arctic').GitHubTokens }
  {=/ enabledProviders.isGitHubAuthEnabled =}
  {=# enabledProviders.isKeycloakAuthEnabled =}
  | { providerName: 'keycloak'; tokens: import('arctic').KeycloakTokens }
  {=/ enabledProviders.isKeycloakAuthEnabled =}
  {=# enabledProviders.isMicrosoftAuthEnabled =}
  | { providerName: 'microsoft'; tokens: import('arctic').MicrosoftEntraIdTokens }
  {=/ enabledProviders.isMicrosoftAuthEnabled =}
  | never
)