package bitwarden

import (
	"context"
	"encoding/json"
	"fmt"
	"os"
	"time"

	"github.com/quexten/goldwarden/agent/bitwarden/crypto"
	"github.com/quexten/goldwarden/agent/bitwarden/models"
	"github.com/quexten/goldwarden/agent/config"
	"github.com/quexten/goldwarden/agent/vault"
	"github.com/quexten/goldwarden/logging"
)

var log = logging.GetLogger("Goldwarden", "Bitwarden API")

const path = "/.cache/goldwarden-vault.json"

func Sync(ctx context.Context, config *config.Config) (models.SyncData, error) {
	var sync models.SyncData
	if err := authenticatedHTTPGet(ctx, config.ConfigFile.ApiUrl+"/sync", &sync); err != nil {
		return models.SyncData{}, fmt.Errorf("could not sync: %v", err)
	}

	home, _ := os.UserHomeDir()
	WriteVault(sync, home+path)
	return sync, nil
}

func DoFullSync(ctx context.Context, vault *vault.Vault, config *config.Config, userSymmetricKey *crypto.SymmetricEncryptionKey, allowCache bool) error {
	log.Info("Performing full sync...")
	sync, err := Sync(ctx, config)
	if err != nil {
		log.Error("Could not sync: %v", err)
		if allowCache {
			home, _ := os.UserHomeDir()
			sync, err = ReadVault(home + path)
			if err != nil {
				return err
			}
		} else {
			return err
		}
	} else {
		log.Info("Sync successful, initializing keyring and vault...")
	}

	var orgKeys map[string]string = make(map[string]string)
	log.Info("Reading  %d org keys...", len(sync.Profile.Organizations))
	for _, org := range sync.Profile.Organizations {
		orgId := org.Id.String()
		orgKeys[orgId] = org.Key
	}
	if userSymmetricKey != nil {
		log.Info("Initializing keyring from user symmetric key...")
		crypto.InitKeyringFromUserSymmetricKey(vault.Keyring, *userSymmetricKey, sync.Profile.PrivateKey, orgKeys)
	}

	log.Info("Clearing vault...")
	vault.Clear()
	vault.SetLastSynced(time.Now().Unix())
	log.Info("Adding %d ciphers to vault...", len(sync.Ciphers))
	for _, cipher := range sync.Ciphers {
		switch cipher.Type {
		case models.CipherLogin:
			vault.AddOrUpdateLogin(cipher)
		case models.CipherNote:
			vault.AddOrUpdateSecureNote(cipher)
		}
	}

	return nil
}

func WriteVault(data models.SyncData, path string) error {
	dataJson, err := json.Marshal(data)
	if err != nil {
		return err
	}

	// write to disk
	os.Remove(path)
	file, err := os.OpenFile(path, os.O_CREATE|os.O_WRONLY, 0600)
	if err != nil {
		return err
	}

	defer file.Close()

	_, err = file.Write(dataJson)
	if err != nil {
		return err
	}
	return nil
}

func ReadVault(path string) (models.SyncData, error) {
	file, err := os.Open(path)
	if err != nil {
		return models.SyncData{}, err
	}
	defer file.Close()

	decoder := json.NewDecoder(file)
	data := models.SyncData{}
	err = decoder.Decode(&data)
	if err != nil {
		return models.SyncData{}, err
	}
	return data, nil
}