// Copyright (c) .NET Foundation. All rights reserved.
// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.

using System;
using System.Collections.Generic;
#if NET5_0_OR_GREATER
using System.Diagnostics.CodeAnalysis;
#endif
using System.Globalization;
using System.Linq;
using Newtonsoft.Json.Linq;
using NuGet.Packaging;
using NuGet.Packaging.Core;
using NuGet.Protocol.Core.Types;
using NuGet.Protocol.Model;

namespace NuGet.Protocol
{
    public class RepositorySignatureResource : INuGetResource
    {
        public string Source { get; }

        public bool AllRepositorySigned { get; }

        public IEnumerable<IRepositoryCertificateInfo> RepositoryCertificateInfos { get; }

#if NET5_0_OR_GREATER
        [RequiresUnreferencedCode("Uses Newtonsoft.Json reflection-based deserialization.")]
        [RequiresDynamicCode("Uses Newtonsoft.Json reflection-based deserialization.")]
#endif
        public RepositorySignatureResource(JObject repoSignInformationContent, SourceRepository source)
        {
            var allRepositorySigned = repoSignInformationContent.GetBoolean(JsonProperties.AllRepositorySigned) ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.AllRepositorySigned, source.PackageSource.Source));
            var data = repoSignInformationContent[JsonProperties.SigningCertificates] as JArray ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.SigningCertificates, source.PackageSource.Source));

            AllRepositorySigned = allRepositorySigned;
            RepositoryCertificateInfos = data.OfType<JObject>().Select(p => p.FromJToken<RepositoryCertificateInfo>()!);

            foreach (var repositoryCertificateInfo in RepositoryCertificateInfos)
            {
                if (!Uri.TryCreate(repositoryCertificateInfo.ContentUrl, UriKind.Absolute, out Uri? repositoryContentUrl)
                    || !string.Equals(repositoryContentUrl.Scheme, "https", StringComparison.OrdinalIgnoreCase))
                {
                    throw new FatalProtocolException(Strings.RepositoryContentUrlMustBeHttps);
                }
            }

            Source = source.PackageSource.Source;
        }

        internal RepositorySignatureResource(RepositorySignatureModel model, SourceRepository source)
        {
            _ = model ?? throw new ArgumentNullException(nameof(model));
            _ = source ?? throw new ArgumentNullException(nameof(source));

            AllRepositorySigned = model.AllRepositorySigned ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.AllRepositorySigned, source.PackageSource.Source));

            RepositoryCertificateInfo[] certs = model.SigningCertificates ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.SigningCertificates, source.PackageSource.Source));

            foreach (RepositoryCertificateInfo cert in certs)
            {
                if (!Uri.TryCreate(cert.ContentUrl, UriKind.Absolute, out Uri? contentUrl)
                    || !string.Equals(contentUrl.Scheme, "https", StringComparison.OrdinalIgnoreCase))
                {
                    throw new FatalProtocolException(Strings.RepositoryContentUrlMustBeHttps);
                }
            }

            RepositoryCertificateInfos = certs;
            Source = source.PackageSource.Source;
        }

        // Test only.
        public RepositorySignatureResource(bool allRepositorySigned, IEnumerable<IRepositoryCertificateInfo> repositoryCertInfos)
        {
            AllRepositorySigned = allRepositorySigned;
            RepositoryCertificateInfos = repositoryCertInfos;
            Source = string.Empty;
        }

        public void UpdateRepositorySignatureInfo()
        {
            RepositorySignatureInfoProvider.Instance.AddOrUpdateRepositorySignatureInfo
                (Source, new RepositorySignatureInfo(AllRepositorySigned, RepositoryCertificateInfos));
        }

    }
}