// Copyright (c) .NET Foundation. All rights reserved.
// Licensed under the Apache License, Version 2.0. See License.txt in the project root for license information.

#nullable disable

using System;
using System.Collections.Generic;
using System.Globalization;
using System.Linq;
using Newtonsoft.Json.Linq;
using NuGet.Packaging;
using NuGet.Packaging.Core;
using NuGet.Protocol.Core.Types;
using NuGet.Protocol.Model;

namespace NuGet.Protocol
{
    public class RepositorySignatureResource : INuGetResource
    {
        public string Source { get; }

        public bool AllRepositorySigned { get; }

        public IEnumerable<IRepositoryCertificateInfo> RepositoryCertificateInfos { get; }

        public RepositorySignatureResource(JObject repoSignInformationContent, SourceRepository source)
        {
            var allRepositorySigned = repoSignInformationContent.GetBoolean(JsonProperties.AllRepositorySigned) ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.AllRepositorySigned, source.PackageSource.Source));
            var data = repoSignInformationContent[JsonProperties.SigningCertificates] as JArray ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.SigningCertificates, source.PackageSource.Source));

            AllRepositorySigned = allRepositorySigned;
            RepositoryCertificateInfos = data.OfType<JObject>().Select(p => p.FromJToken<RepositoryCertificateInfo>());

            foreach (var repositoryCertificateInfo in RepositoryCertificateInfos)
            {
                var validUri = Uri.TryCreate(repositoryCertificateInfo.ContentUrl, UriKind.Absolute, out var repositoryContentUrl);
                if (!validUri || !string.Equals(repositoryContentUrl.Scheme, "https", StringComparison.OrdinalIgnoreCase))
                {
                    throw new FatalProtocolException(Strings.RepositoryContentUrlMustBeHttps);
                }
            }

            Source = source.PackageSource.Source;
        }

        internal RepositorySignatureResource(RepositorySignatureModel model, SourceRepository source)
        {
            AllRepositorySigned = model.AllRepositorySigned ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.AllRepositorySigned, source.PackageSource.Source));

            RepositoryCertificateInfo[] certs = model.SigningCertificates ??
                throw new FatalProtocolException(string.Format(CultureInfo.CurrentCulture, Strings.Log_FailedToParseRepoSignInfor, JsonProperties.SigningCertificates, source.PackageSource.Source));

            foreach (RepositoryCertificateInfo cert in certs)
            {
                if (!Uri.TryCreate(cert.ContentUrl, UriKind.Absolute, out Uri contentUrl)
                    || !string.Equals(contentUrl.Scheme, "https", StringComparison.OrdinalIgnoreCase))
                {
                    throw new FatalProtocolException(Strings.RepositoryContentUrlMustBeHttps);
                }
            }

            RepositoryCertificateInfos = certs;
            Source = source.PackageSource.Source;
        }

        // Test only.
        public RepositorySignatureResource(bool allRepositorySigned, IEnumerable<IRepositoryCertificateInfo> repositoryCertInfos)
        {
            AllRepositorySigned = allRepositorySigned;
            RepositoryCertificateInfos = repositoryCertInfos;
        }

        public void UpdateRepositorySignatureInfo()
        {
            RepositorySignatureInfoProvider.Instance.AddOrUpdateRepositorySignatureInfo
                (Source, new RepositorySignatureInfo(AllRepositorySigned, RepositoryCertificateInfos));
        }

    }
}