using System;
using System.Security.Claims;
using BlueWest.Cryptography;
using BlueWest.Data.Application;
using BlueWest.Data.Application.Users;
using Microsoft.AspNetCore.Authentication.Cookies;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.Identity;
using static BlueWest.Data.Auth.Context.Users.AuthConsts;

namespace BlueWest.Data.Auth.Context.Users
{
    /// <summary>
    /// Authentication Manager for the Application Users
    /// </summary>
    public class AuthManager : IAuthManager
    {
        private readonly ApplicationUserManager _userManager;
        private readonly IHasher _hasher;
        private readonly IJwtFactory _jwtFactory;
        private readonly ISessionCache _sessionCache;

        /// <summary>
        /// Auth manager constructor
        /// </summary>
        /// <param name="userManager"></param>
        /// <param name="hasher"></param>
        /// <param name="jwtFactory"></param>
        /// <param name="sessionCache"></param>
        public AuthManager(
            ApplicationUserManager userManager,
            IHasher hasher,
            IJwtFactory jwtFactory,
            ISessionCache sessionCache)
        {
            _userManager = userManager;
            _hasher = hasher;
            _jwtFactory = jwtFactory;
            _sessionCache = sessionCache;
        }

        private async Task<SessionToken> GetSessionToken(LoginRequest loginRequest)
        {
            var uuid = loginRequest.GetUuid();
            var hashUuid = GetHashFromUuid(uuid);
            var sessionToken = await _sessionCache.GetSessionTokenByIdAsync(hashUuid);
            return sessionToken;
        }

        private string GetHashFromUuid(string uuid)
        {
            return _hasher.CreateHash(uuid, BaseCryptoItem.HashAlgorithm.SHA2_512);
        }

        private SessionToken GetNewSessionToken(LoginRequest loginRequest, ApplicationUser user)
        {
            long timeNow = DateTimeOffset.Now.ToUnixTimeMilliseconds();
            
            var newToken = new SessionToken
            {
                Id = GetHashFromUuid(loginRequest.GetUuid()),
                UserId = user.Id,
                CreatedDate = timeNow,
                IsValid = true,
                ValidFor = SessionConstants.DefaultSessionMaxAge.Milliseconds
            };
            
            return newToken;
        }

        public bool SessionTokenIsValid(SessionToken token)
        {
            var hasChanges = token.Validate();
            
            if (hasChanges)
            {
                _sessionCache.SaveAsync();
            }

            return token.IsValid;
        }

        public async Task<(bool, SessionTokenUnique, ClaimsIdentity)> GetSessionTokenIdByLoginRequest(LoginRequest loginRequest, string authenticationType = JwtBearerDefaults.AuthenticationScheme)
        {
            var user = await _userManager.FindByEmailAsync(loginRequest.Email);

            if (user == null) return NegativeToken;

            if (!await _userManager.CheckPasswordAsync(user, loginRequest.Password)) return NegativeToken;

            var identity = new ClaimsIdentity(authenticationType);
            identity.AddClaim(new Claim(ClaimTypes.Email, user.Email));
            identity.AddClaim(new Claim(ClaimTypes.MobilePhone, user.PhoneNumber));
            identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, user.Id));
            

            var sessionToken = await GetSessionToken(loginRequest);

            if (sessionToken == null || !SessionTokenIsValid(sessionToken))
            {
                var (success, bearerToken) = await GenerateBearerToken(identity, user);
                var newSessionToken = GetNewSessionToken(loginRequest, user);
                await _sessionCache.AddSessionToken(newSessionToken);
                var tokenUnique = new SessionTokenUnique(newSessionToken);
                return OkAuth(tokenUnique, identity, success);
            }

            var response = new SessionTokenUnique(sessionToken);
            return OkAuth(response, identity);
        }
        
        public async Task<(bool, SessionTokenUnique, ClaimsIdentity)> GetSessionTokenIdByLoginRequestViaCookie(LoginRequest loginRequest, string authenticationType = CookieAuthenticationDefaults.AuthenticationScheme)
        {
            var user = await _userManager.FindByEmailAsync(loginRequest.Email);

            if (user == null) return NegativeToken;

            if (!await _userManager.CheckPasswordAsync(user, loginRequest.Password)) return NegativeToken;

            var identity = new ClaimsIdentity(authenticationType);
            identity.AddClaim(new Claim(ClaimTypes.Email, user.Email));
            identity.AddClaim(new Claim(ClaimTypes.MobilePhone, user.PhoneNumber));
            identity.AddClaim(new Claim(ClaimTypes.NameIdentifier, user.Id));


            var sessionToken = await GetSessionToken(loginRequest);

            if (sessionToken == null || !SessionTokenIsValid(sessionToken))
            {
                var newSessionToken = GetNewSessionToken(loginRequest, user);
                await _sessionCache.AddSessionToken(newSessionToken);
                var tokenUnique = new SessionTokenUnique(newSessionToken);
                return OkAuth(tokenUnique, identity);
            }

            var response = new SessionTokenUnique(sessionToken);
            return OkAuth(response, identity);
        }
        

        private async Task<(bool, string)> GenerateBearerToken(ClaimsIdentity identity, ApplicationUser user)
        {
            var jwtToken = await _jwtFactory.GenerateEncodedToken(user.Id, user.UserName);
            var completed = await _userManager.SetAuthenticationTokenAsync(user, SessionConstants.ApiNamePolicy,
                SessionConstants.ApiNamePolicy, jwtToken.Token);
            return (completed == IdentityResult.Success, jwtToken.Token);
        }


        /// <summary>
        /// Verify Password
        /// </summary>
        /// <param name="email"></param>
        /// <param name="password"></param>
        /// <returns></returns>
        public async Task<bool> VerifyLoginByEmailAsync(string email, string password)
        {
            var user = await _userManager.FindByEmailAsync(email);
            return user != null && await _userManager.CheckPasswordAsync(user, password);
        }


        /// <summary>
        /// Create user 
        /// </summary>
        /// <param name="userSignupDto"></param>
        /// <returns></returns>
        public async Task<IdentityResult> CreateUserAsync(RegisterRequest userSignupDto)
        {
            userSignupDto.Password = _hasher.CreateHash(userSignupDto.Password, BaseCryptoItem.HashAlgorithm.SHA3_512);;
            var newUser = userSignupDto.ToUser();
            return await _userManager.CreateAsync(newUser);
        }
    }
}