package revaconfig

import (
	"path/filepath"

	"github.com/qsfera/server/pkg/config/defaults"
	"github.com/qsfera/server/services/auth-app/pkg/config"
)

// AuthAppConfigFromStruct will adapt a КуСфера config struct into a reva mapstructure to start a reva service.
func AuthAppConfigFromStruct(cfg *config.Config) map[string]any {
	appAuthJSON := filepath.Join(defaults.BaseDataPath(), "appauth.json")

	jsonCS3pwGenOpt := map[string]any{}
	switch cfg.StorageDrivers.JSONCS3.PasswordGenerator {
	case "random":
		jsonCS3pwGenOpt["token_strength"] = cfg.StorageDrivers.JSONCS3.PasswordGeneratorOptions.RandPWOpts.PasswordLength
	case "diceware":
		jsonCS3pwGenOpt["number_of_words"] = cfg.StorageDrivers.JSONCS3.PasswordGeneratorOptions.DicewareOptions.NumberOfWords
	}

	rcfg := map[string]any{
		"shared": map[string]any{
			"jwt_secret":                cfg.TokenManager.JWTSecret,
			"gatewaysvc":                cfg.Reva.Address,
			"skip_user_groups_in_token": cfg.SkipUserGroupsInToken,
			"grpc_client_options":       cfg.Reva.GetGRPCClientConfig(),
			"multi_tenant_enabled":      cfg.Commons.MultiTenantEnabled,
		},
		"grpc": map[string]any{
			"network": cfg.GRPC.Protocol,
			"address": cfg.GRPC.Addr,
			"tls_settings": map[string]any{
				"enabled":     cfg.GRPC.TLS.Enabled,
				"certificate": cfg.GRPC.TLS.Cert,
				"key":         cfg.GRPC.TLS.Key,
			},
			"services": map[string]any{
				"authprovider": map[string]any{
					"auth_manager": "appauth",
					"auth_managers": map[string]any{
						"appauth": map[string]any{
							"gateway_addr": cfg.Reva.Address,
						},
					},
				},
				"applicationauth": map[string]any{
					"driver": cfg.StorageDriver,
					"drivers": map[string]any{
						"json": map[string]any{
							"file": appAuthJSON,
						},
						"jsoncs3": map[string]any{
							"provider_addr":       cfg.StorageDrivers.JSONCS3.ProviderAddr,
							"service_user_id":     cfg.StorageDrivers.JSONCS3.SystemUserID,
							"service_user_idp":    cfg.StorageDrivers.JSONCS3.SystemUserIDP,
							"machine_auth_apikey": cfg.StorageDrivers.JSONCS3.SystemUserAPIKey,
							"password_generator":  cfg.StorageDrivers.JSONCS3.PasswordGenerator,
							"generator_config":    jsonCS3pwGenOpt,
						},
					},
				},
			},
			"interceptors": map[string]any{
				"prometheus": map[string]any{
					"namespace": "qsfera",
					"subsystem": "auth_app",
				},
			},
		},
	}
	return rcfg
}