import * as client from "openid-client";

export const clientConfig = {
  url: process.env.REACT_APP_SSO_BASE_URL || "",
  client_id: process.env.REACT_APP_SSO_CLIENT_ID || "",
  client_secret: process.env.REACT_APP_SSO_CLIENT_SECRET || "",
  scope: process.env.REACT_APP_SSO_SCOPE || "",
  redirect_uri: process.env.REACT_APP_SSO_REDIRECT_URI || "",
  response_type: process.env.REACT_APP_SSO_RESPONSE_TYPE || "",
  code_challenge_method: process.env.REACT_APP_SSO_CODE_CHALLENGE_METHOD || "",
  post_logout_redirect_uri:
    process.env.REACT_APP_SSO_POST_LOGOUT_REDIRECT || "",
};

export async function getClientConfig() {
  console.log(process.env.REACT_APP_SSO_BASE_URL)
  return await client.discovery(
    new URL(clientConfig.url),
    clientConfig.client_id,
    clientConfig.client_secret
  );
}

export async function Auth() {
  console.log("bap");
  let code_verifier = client.randomPKCECodeVerifier();
  let code_challenge = await client.calculatePKCECodeChallenge(code_verifier);
  const openIdClientConfig = await getClientConfig();
  let parameters: Record<string, string> = {
    redirect_uri: clientConfig.redirect_uri,
    scope: clientConfig.scope!,
    code_challenge,
    code_challenge_method: clientConfig.code_challenge_method,
  };
  let state!: string;
  if (!openIdClientConfig.serverMetadata().supportsPKCE()) {
    state = client.randomState();
    parameters.state = state;
  }
  let redirectTo = client.buildAuthorizationUrl(openIdClientConfig, parameters);
  console.log(redirectTo);

  return { redirectTo, code_verifier, state };
}

export async function Logout() {
  const openIdClientConfig = await getClientConfig();
  const endSessionUrl = client.buildEndSessionUrl(openIdClientConfig, {
    post_logout_redirect_uri: clientConfig.post_logout_redirect_uri,
  });

  return endSessionUrl;
}

export async function Callback(code_verifier: string, state: any) {
  try {
    const openIdClientConfig = await getClientConfig();
    const currentUrl = new URL(window.location.href);

    console.log("Callback URL:", currentUrl.toString());
    console.log("Code verifier:", code_verifier);
    console.log("State:", state);

    const tokenSet = await client.authorizationCodeGrant(
      openIdClientConfig,
      currentUrl,
      {
        pkceCodeVerifier: code_verifier,
        expectedState: state,
      }
    );

    const { access_token } = tokenSet;
    const claims = tokenSet.claims()!;
    const { sub } = claims;

    const userinfo = await client.fetchUserInfo(
      openIdClientConfig,
      access_token,
      sub
    );

    return { tokenSet, userinfo };
  } catch (e) {
    console.error("Token grant error:", e);
  }
}