package checker

import (
	"github.com/tufin/oasdiff/diff"
)

const (
	APIComponentsSecurityRemovedCheckId           = "api-security-component-removed"
	APIComponentsSecurityAddedCheckId             = "api-security-component-added"
	APIComponentsSecurityComponentOauthUrlUpdated = "api-security-component-oauth-url-changed"
	APIComponentsSecurityTyepUpdated              = "api-security-component-type-changed"
	APIComponentsSecurityOauthTokenUrlUpdated     = "api-security-component-oauth-token-url-changed"
	APIComponentSecurityOauthScopeAdded           = "api-security-component-oauth-scope-added"
	APIComponentSecurityOauthScopeRemoved         = "api-security-component-oauth-scope-removed"
	APIComponentSecurityOauthScopeUpdated         = "api-security-component-oauth-scope-changed"
)

func checkOAuthUpdates(updatedSecurity *diff.SecuritySchemeDiff, config Config, updatedSecurityName string) Changes {
	result := make(Changes, 0)

	if updatedSecurity.OAuthFlowsDiff == nil {
		return result
	}

	if updatedSecurity.OAuthFlowsDiff.ImplicitDiff == nil {
		return result
	}

	if urlDiff := updatedSecurity.OAuthFlowsDiff.ImplicitDiff.AuthorizationURLDiff; urlDiff != nil {
		result = append(result, ComponentChange{
			Id:     APIComponentsSecurityComponentOauthUrlUpdated,
			Level:  INFO,
			Text:   config.Localize(APIComponentsSecurityComponentOauthUrlUpdated, ColorizedValue(updatedSecurityName), ColorizedValue(urlDiff.From), ColorizedValue(urlDiff.To)),
			Source: "",
		})
	}

	if tokenDiff := updatedSecurity.OAuthFlowsDiff.ImplicitDiff.TokenURLDiff; tokenDiff != nil {
		result = append(result, ComponentChange{
			Id:     APIComponentsSecurityOauthTokenUrlUpdated,
			Level:  INFO,
			Text:   config.Localize(APIComponentsSecurityOauthTokenUrlUpdated, ColorizedValue(updatedSecurityName), ColorizedValue(tokenDiff.From), ColorizedValue(tokenDiff.To)),
			Source: "",
		})
	}

	if scopesDiff := updatedSecurity.OAuthFlowsDiff.ImplicitDiff.ScopesDiff; scopesDiff != nil {
		for _, addedScope := range scopesDiff.Added {
			result = append(result, ComponentChange{
				Id:     APIComponentSecurityOauthScopeAdded,
				Level:  INFO,
				Text:   config.Localize(APIComponentSecurityOauthScopeAdded, ColorizedValue(updatedSecurityName), ColorizedValue(addedScope)),
				Source: "",
			})
		}

		for _, removedScope := range scopesDiff.Deleted {
			result = append(result, ComponentChange{
				Id:     APIComponentSecurityOauthScopeRemoved,
				Level:  INFO,
				Text:   config.Localize(APIComponentSecurityOauthScopeRemoved, ColorizedValue(updatedSecurityName), ColorizedValue(removedScope)),
				Source: "",
			})
		}

		for name, modifiedScope := range scopesDiff.Modified {
			result = append(result, ComponentChange{
				Id:     APIComponentSecurityOauthScopeUpdated,
				Level:  INFO,
				Text:   config.Localize(APIComponentSecurityOauthScopeUpdated, ColorizedValue(updatedSecurityName), ColorizedValue(name), ColorizedValue(modifiedScope.From), ColorizedValue(modifiedScope.To)),
				Source: "",
			})
		}

	}

	return result
}

func APIComponentsSecurityUpdatedCheck(diffReport *diff.Diff, operationsSources *diff.OperationsSourcesMap, config Config) Changes {
	result := make(Changes, 0)
	if diffReport.ComponentsDiff.SecuritySchemesDiff == nil {
		return result
	}

	for _, updatedSecurity := range diffReport.ComponentsDiff.SecuritySchemesDiff.Added {
		result = append(result, ComponentChange{
			Id:     APIComponentsSecurityAddedCheckId,
			Level:  INFO,
			Text:   config.Localize(APIComponentsSecurityAddedCheckId, ColorizedValue(updatedSecurity)),
			Source: "",
		})
	}

	for _, updatedSecurity := range diffReport.ComponentsDiff.SecuritySchemesDiff.Deleted {
		result = append(result, ComponentChange{
			Id:     APIComponentsSecurityRemovedCheckId,
			Level:  INFO,
			Text:   config.Localize(APIComponentsSecurityRemovedCheckId, ColorizedValue(updatedSecurity)),
			Source: "",
		})
	}

	for updatedSecurityName, updatedSecurity := range diffReport.ComponentsDiff.SecuritySchemesDiff.Modified {
		result = append(result, checkOAuthUpdates(updatedSecurity, config, updatedSecurityName)...)

		if updatedSecurity.TypeDiff != nil {
			result = append(result, ComponentChange{
				Id:     APIComponentsSecurityTyepUpdated,
				Level:  INFO,
				Text:   config.Localize(APIComponentsSecurityTyepUpdated, ColorizedValue(updatedSecurityName), ColorizedValue(updatedSecurity.TypeDiff.From), ColorizedValue(updatedSecurity.TypeDiff.To)),
				Source: "",
			})
		}
	}

	return result
}