Impressia/Vernissage/Services/AuthorizationService.swift

//
//  https://mczachurski.dev
//  Copyright © 2023 Marcin Czachurski and the repository contributors.
//  Licensed under the MIT License.
//
    
import Foundation
import MastodonKit
import AuthenticationServices

/// Srvice responsible for login user into the Pixelfed account.
public class AuthorizationService {
    public static let shared = AuthorizationService()
    private init() { }
    
    /// Access token verification.
    public func verifyAccount(session: AuthorizationSession, _ result: @escaping (AccountData?) -> Void) async {
        let currentAccount = AccountDataHandler.shared.getCurrentAccountData()
        
        // When we dont have even one account stored in database then we have to ask user to enter server and sign in.
        guard let currentAccount, let accessToken = currentAccount.accessToken else {
            result(nil)
            return
        }
        
        // When we have at least one account then we have to verify access token.
        let client = MastodonClient(baseURL: currentAccount.serverUrl).getAuthenticated(token: accessToken)

        do {
            let account = try await client.verifyCredentials()
            try await self.update(account: currentAccount,
                                  basedOn: account,
                                  accessToken: accessToken,
                                  refreshToken: currentAccount.refreshToken)

            result(currentAccount)
        } catch {
            do {
                try await self.refreshCredentials(for: currentAccount, presentationContextProvider: session)
                result(currentAccount)
            } catch {
                ErrorService.shared.handle(error, message: "Issues during refreshing credentials.", showToastr: true)
            }
        }
    }
    
    /// Sign in to the Pixelfed server.
    public func sign(in serverAddress: String, session: AuthorizationSession, _ result: @escaping (AccountData) -> Void) async throws {
                
        guard let baseUrl = URL(string: serverAddress) else {
            throw AuthorisationError.badServerUrl
        }
        
        let client = MastodonClient(baseURL: baseUrl)
        
        // Verify address.
        _ = try await client.readInstanceInformation()

        // Create application (we will get clientId amd clientSecret).
        let oAuthApp = try await client.createApp(
            named: AppConstants.oauthApplicationName,
            redirectUri: AppConstants.oauthRedirectUri,
            scopes: Scopes(AppConstants.oauthScopes),
            website: baseUrl)
        
        // Authorize a user (browser, we will get clientCode).
        let oAuthSwiftCredential = try await client.authenticate(
            app: oAuthApp,
            scope: Scopes(AppConstants.oauthScopes),
            callbackUrlScheme: AppConstants.oauthScheme,
            presentationContextProvider: session)
                
        // Get authenticated client.
        let authenticatedClient = client.getAuthenticated(token: oAuthSwiftCredential.oauthToken)
        
        // Get account information from server.
        let account = try await authenticatedClient.verifyCredentials()
        
        // Create account object in database.
        let accountData = AccountDataHandler.shared.createAccountDataEntity()

        accountData.id = account.id
        accountData.username = account.username
        accountData.acct = account.acct
        accountData.displayName = account.displayNameWithoutEmojis
        accountData.note = account.note
        accountData.url = account.url
        accountData.avatar = account.avatar
        accountData.header = account.header
        accountData.locked = account.locked
        accountData.createdAt = account.createdAt
        accountData.followersCount = Int32(account.followersCount)
        accountData.followingCount = Int32(account.followingCount)
        accountData.statusesCount = Int32(account.statusesCount)
        
        // Store data about Server and OAuth client.
        accountData.serverUrl = baseUrl
        accountData.clientId = oAuthApp.clientId
        accountData.clientSecret = oAuthApp.clientSecret
        accountData.clientVapidKey = oAuthApp.vapidKey ?? String.empty()
        
        // Store data about oauth tokens.
        accountData.accessToken = oAuthSwiftCredential.oauthToken
        accountData.refreshToken = oAuthSwiftCredential.oauthRefreshToken
        
        // Download avatar image.
        if let avatarUrl = account.avatar {
            do {
                let avatarData = try await RemoteFileService.shared.fetchData(url: avatarUrl)
                accountData.avatarData = avatarData
            }
            catch {
                ErrorService.shared.handle(error, message: "Avatar has not been downloaded.")
            }
        }
        
        // Set newly created account as current.
        let defaultSettings = ApplicationSettingsHandler.shared.getDefaultSettings()
        defaultSettings.currentAccount = accountData.id
        
        // Save account data in database and in application state.
        CoreDataHandler.shared.save()
        
        // Return account data.
        result(accountData)
    }
        
    private func refreshCredentials(for accountData: AccountData,
                                    presentationContextProvider: ASWebAuthenticationPresentationContextProviding
    ) async throws {

        let client = MastodonClient(baseURL: accountData.serverUrl)

        // Create application (we will get clientId amd clientSecret).
        let oAuthApp = Application(clientId: accountData.clientId, clientSecret: accountData.clientSecret)
        
        // Authorize a user (browser, we will get clientCode).
        let oAuthSwiftCredential = try await client.authenticate(app: oAuthApp,
                                                                 scope: Scopes(AppConstants.oauthScopes),
                                                                 callbackUrlScheme: AppConstants.oauthScheme,
                                                                 presentationContextProvider: presentationContextProvider)
                
        // Get authenticated client.
        let authenticatedClient = client.getAuthenticated(token: oAuthSwiftCredential.oauthToken)
        
        // Get account information from server.
        let account = try await authenticatedClient.verifyCredentials()
        try await self.update(account: accountData,
                              basedOn: account,
                              accessToken: oAuthSwiftCredential.oauthToken,
                              refreshToken: oAuthSwiftCredential.oauthRefreshToken)
    }
    
    private func update(account dbAccount: AccountData,
                        basedOn account: Account,
                        accessToken: String,
                        refreshToken: String?
    ) async throws {
        dbAccount.username = account.username
        dbAccount.acct = account.acct
        dbAccount.displayName = account.displayName
        dbAccount.note = account.note
        dbAccount.url = account.url
        dbAccount.avatar = account.avatar
        dbAccount.header = account.header
        dbAccount.locked = account.locked
        dbAccount.createdAt = account.createdAt
        dbAccount.followersCount = Int32(account.followersCount)
        dbAccount.followingCount = Int32(account.followingCount)
        dbAccount.statusesCount = Int32(account.statusesCount)
            
        // Store data about new oauth tokens.
        dbAccount.accessToken = accessToken
        dbAccount.refreshToken = refreshToken
        
        // Download avatar image.
        if let avatarUrl = account.avatar {
            do {
                let avatarData = try await RemoteFileService.shared.fetchData(url: avatarUrl)
                dbAccount.avatarData = avatarData
            }
            catch {
                ErrorService.shared.handle(error, message: "Avatar has not been downloaded.")
            }
        }
        
        // We have to be sure that account id is saved as default account.
        let defaultSettings = ApplicationSettingsHandler.shared.getDefaultSettings()
        defaultSettings.currentAccount = dbAccount.id
        
        // Save account data in database and in application state.
        CoreDataHandler.shared.save()
    }
}