<?php
/**
 * Authserver, an OAuth2-based single-signon authentication provider written in PHP.
 *
 * Copyright (C) $today.date  Lars Vierbergen
 *
 * his program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
namespace vierbergenlars\AuthserverOAuthAccountBundle\ExternalAccount;

use HWI\Bundle\OAuthBundle\Security\OAuthUtils;
use HWI\Bundle\OAuthBundle\Security\Core\Authentication\Token\OAuthToken;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
use Symfony\Component\Security\Core\Exception\AccessDeniedException;
use vierbergenlars\AuthserverExternalAccountBundle\Entity\ExternalUser;
use vierbergenlars\AuthserverExternalAccountBundle\ExternalAccount\ExternalAccountProviderInterface;
use vierbergenlars\AuthserverExternalAccountBundle\ValueObject\Button;
use vierbergenlars\AuthserverOAuthAccountBundle\ResourceOwner\ResourceOwnerMap;
use vierbergenlars\AuthserverOAuthAccountBundle\Security\Core\User\OAuthUserProvider;

class OAuthExternalAccountProvider implements ExternalAccountProviderInterface
{

    /**
     *
     * @var ResourceOwnerConfig
     */
    private $resourceOwnerConfig;

    /**
     *
     * @var
     */
    private $name;

    /**
     *
     * @var OAuthUtils
     */
    private $OAuthUtils;

    /**
     *
     * @var OAuthUserProvider
     */
    private $userProvider;

    /**
     *
     * @var TokenStorageInterface
     */
    private $tokenStorage;

    /**
     *
     * @var \HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMap
     */
    private $hwiResourceOwnerMap;

    public function __construct($name, ResourceOwnerMap $resourceOwnerMap, OAuthUtils $OAuthUtils, OAuthUserProvider $userProvider, TokenStorageInterface $tokenStorage, \HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMap $hwiResourceOwnerMap)
    {
        $this->resourceOwnerConfig = $resourceOwnerMap[$name];
        $this->name = $name;
        $this->OAuthUtils = $OAuthUtils;
        $this->userProvider = $userProvider;
        $this->tokenStorage = $tokenStorage;
        $this->hwiResourceOwnerMap = $hwiResourceOwnerMap;
    }

    public function getName()
    {
        return 'oauth_' . $this->name;
    }

    public function getServiceName()
    {
        return $this->resourceOwnerConfig->getServiceName();
    }

    public function getIcon()
    {
        return $this->resourceOwnerConfig->getIcon();
    }

    public function getLoginButton()
    {
        return new Button($this->resourceOwnerConfig->getLoginButton() + [
            'url' => $this->OAuthUtils->getLoginUrl(new Request(), $this->name)
        ]);
    }

    public function getConnectButton()
    {
        return new Button($this->resourceOwnerConfig->getConnectButton() + [
            'url' => $this->OAuthUtils->getLoginUrl(new Request(), $this->name)
        ]);
    }

    public function hasConnect()
    {
        return true;
    }

    public function hasDisconnect()
    {
        return true;
    }

    public function disconnect(ExternalUser $externalUser)
    {
        $token = $this->tokenStorage->getToken();
        if ($token instanceof OAuthToken) {
            if ('oauth_' . $token->getResourceOwnerName() === $externalUser->getProvider()) {
                $resourceOwner = $this->hwiResourceOwnerMap->getResourceOwnerByName($token->getResourceOwnerName());
                $userInfo = $resourceOwner->getUserInformation($token->getRawToken());

                if ($userInfo->getUsername() == $externalUser->getProviderRef()) {
                    throw new AccessDeniedException('You can not disconnect the external user you are currently authenticated with.');
                }
            }
        }

        $this->userProvider->disconnect($externalUser);
    }

    public function supports($externalProviderData)
    {
        return true;
    }
}