package oidc

import (
	"context"
	"fmt"

	"github.com/kkb0318/irsa-manager/internal/client"
	"github.com/kkb0318/irsa-manager/internal/selfhosted"
)

const CONFIGURATION_PATH = ".well-known/openid-configuration"

type S3IdPCreator struct {
	s3Client *client.AwsS3Client
}

// NewS3IdPCreator initializes a new instance of S3IdPCreator with the specified AWS region and bucket name.
// This function attempts to create an AWS client configured for the specified region.
func NewS3IdPCreator(awsConfig *client.AwsConfig, bucketName string) (*S3IdPCreator, error) {
	s3Client := awsConfig.S3Cient(bucketName)
	return &S3IdPCreator{s3Client}, nil
}

// CreateStorage creates an S3 bucket
func (s *S3IdPCreator) CreateStorage() error {
	err := s.s3Client.CreateBucket(context.TODO())
	if err != nil {
		return fmt.Errorf("unable to create bucket, %w", err)
	}
	return nil
}

// Upload uploads the OIDC provider's discovery configuration and JSON Web Key Set (JWKS) to the specified AWS S3 bucket.
// This method is responsible for uploading the necessary OIDC configuration files to S3, making them accessible for OIDC clients.
func (s *S3IdPCreator) Upload(ctx context.Context, o selfhosted.OIDCIdProvider) error {
	discovery, err := o.Discovery()
	if err != nil {
		return nil
	}
	err = s.s3Client.PutObject(ctx,
		CONFIGURATION_PATH,
		discovery,
	)
	if err != nil {
		return fmt.Errorf("unable to upload discovery document, %w", err)
	}

	// Uplaod JWK
	jwk, err := o.JWK()
	if err != nil {
		return nil
	}
	err = s.s3Client.PutObject(ctx,
		"keys.json",
		jwk,
	)
	if err != nil {
		return fmt.Errorf("unable to upload JWK, %w", err)
	}
	return nil
}

// issuerHostPath constructs the URL path for the OIDC issuer based on the provided AWS region and bucket name.
// This utility function generates the expected host path for accessing the OIDC configuration stored in an S3 bucket.
func issuerHostPath(region, bucketName string) string {
	hostName := fmt.Sprintf("s3-%s.amazonaws.com", region)
	return fmt.Sprintf("%s/%s", hostName, bucketName)
}