package handlers

import (
	"regexp"
	"strings"
)

type (
	Links struct {
		Profile,
		Signup,
		ConfirmEmail,
		PendingEmailConfirmation,
		Login,

		Security,
		ChangePassword,
		CreatePassword,

		RequestPasswordReset,
		PasswordResetRequested,
		ResetPassword,
		AcceptInvite,
		Sessions,
		AuthorizedClients,
		Logout,

		OAuth2Authorize,
		OAuth2AuthorizeClient,
		OAuth2Token,
		OAuth2Info,
		OAuth2UserInfo,
		OAuth2DefaultClient,
		OAuth2PublicKeys,

		Mfa,

		MfaTotpNewSecret,
		MfaTotpQRImage,
		MfaTotpDisable,

		External,

		SamlInit,
		SamlCallback,
		SamlMetadata,
		SamlLogout,

		Base,

		Assets,

		AuthAssets string
	}
)

var (
	invalidLinkChars        = regexp.MustCompile(`[^-A-Za-z0-9+&@#/%?=~_|!:,.;\\(\\)]`)
	stripSchema             = regexp.MustCompile(`(.*\/\/)`)
	BasePath         string = "/"
	WebappBasePath   string = "/"
)

func GetLinks() Links {
	var b = strings.TrimSuffix(BasePath, "/") + "/"

	return Links{
		Profile:                  b + "auth",
		Signup:                   b + "auth/signup",
		ConfirmEmail:             b + "auth/confirm-email",
		PendingEmailConfirmation: b + "auth/pending-email-confirmation",
		Login:                    b + "auth/login",
		Security:                 b + "auth/security",
		ChangePassword:           b + "auth/change-password",
		CreatePassword:           b + "auth/create-password",
		RequestPasswordReset:     b + "auth/request-password-reset",
		PasswordResetRequested:   b + "auth/password-reset-requested",
		ResetPassword:            b + "auth/reset-password",
		AcceptInvite:             b + "auth/accept-invite",
		Sessions:                 b + "auth/sessions",
		AuthorizedClients:        b + "auth/authorized-clients",
		Logout:                   b + "auth/logout",

		OAuth2Authorize:       b + "auth/oauth2/authorize",
		OAuth2AuthorizeClient: b + "auth/oauth2/authorize-client",
		OAuth2Token:           b + "auth/oauth2/token",
		OAuth2Info:            b + "auth/oauth2/info",
		OAuth2UserInfo:        b + "auth/oauth2/userinfo",
		OAuth2DefaultClient:   b + "auth/oauth2/default-client",
		OAuth2PublicKeys:      b + "auth/oauth2/public-keys",

		Mfa:              b + "auth/mfa",
		MfaTotpNewSecret: b + "auth/mfa/totp/setup",
		MfaTotpQRImage:   b + "auth/mfa/totp/qr.png",
		MfaTotpDisable:   b + "auth/mfa/totp/disable",

		External: b + "auth/external",

		SamlInit:     b + "auth/external/saml/init",
		SamlCallback: b + "auth/external/saml/callback",
		SamlMetadata: b + "auth/external/saml/metadata",
		SamlLogout:   b + "auth/external/saml/slo",

		Assets:     b + "assets",
		AuthAssets: b + "auth/assets/public",
		Base:       b,
	}
}

// trim base path
func tbp(s string) string {
	s = strings.TrimPrefix(s, BasePath)
	if !strings.HasPrefix(s, "/") {
		s = "/" + s
	}

	return s
}

func sanitizeLink(l string) string {
	return `//` + stripSchema.ReplaceAllString(invalidLinkChars.ReplaceAllString(l, ""), "")
}