// SPDX-FileCopyrightText: 2024 James Graham <james.h.graham@protonmail.com>
// SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only OR LicenseRef-KDE-Accepted-GPL

#include "threepidmodel.h"

#include <QCryptographicHash>
#include <QNetworkReply>

#include <Quotient/csapi/openid.h>
#include <Quotient/networkaccessmanager.h>

#include "neochatconnection.h"

ThreePIdModel::ThreePIdModel(NeoChatConnection *connection)
    : QAbstractListModel(connection)
{
    Q_ASSERT(connection);
    connect(connection, &NeoChatConnection::stateChanged, this, [this]() {
        refreshModel();
    });
}

QVariant ThreePIdModel::data(const QModelIndex &index, int role) const
{
    if (!index.isValid()) {
        return {};
    }
    if (index.row() >= rowCount()) {
        qDebug() << "ThreePIdModel, something's wrong: index.row() >= m_threePIds.count()";
        return {};
    }

    if (role == AddressRole) {
        return m_threePIds.at(index.row()).address;
    }
    if (role == MediumRole) {
        return m_threePIds.at(index.row()).medium;
    }
    if (role == IsBoundRole) {
        return m_bindings.contains(m_threePIds.at(index.row()).address);
    }

    return {};
}

int ThreePIdModel::rowCount(const QModelIndex &parent) const
{
    Q_UNUSED(parent)
    return m_threePIds.count();
}

QHash<int, QByteArray> ThreePIdModel::roleNames() const
{
    return {
        {AddressRole, QByteArrayLiteral("address")},
        {MediumRole, QByteArrayLiteral("medium")},
        {IsBoundRole, QByteArrayLiteral("isBound")},
    };
}

void ThreePIdModel::refreshModel()
{
    const auto connection = dynamic_cast<NeoChatConnection *>(this->parent());
    if (connection != nullptr && connection->isLoggedIn()) {
        const auto threePIdJob = connection->callApi<Quotient::GetAccount3PIDsJob>();
        connect(threePIdJob, &Quotient::BaseJob::success, this, [this, threePIdJob]() {
            beginResetModel();
            m_threePIds = threePIdJob->threepids();
            endResetModel();

            refreshBindStatus();
        });
    }
}

void ThreePIdModel::refreshBindStatus()
{
    const auto connection = dynamic_cast<NeoChatConnection *>(this->parent());
    if (connection == nullptr || !connection->hasIdentityServer()) {
        return;
    }

    const auto openIdJob = connection->callApi<Quotient::RequestOpenIdTokenJob>(connection->userId());
    connect(openIdJob, &Quotient::BaseJob::success, this, [this, connection, openIdJob]() {
        const auto requestUrl = QUrl(connection->identityServer().toString() + QStringLiteral("/_matrix/identity/v2/account/register"));
        if (!(requestUrl.scheme() == QStringLiteral("https") || requestUrl.scheme() == QStringLiteral("http"))) {
            return;
        }

        QNetworkRequest request(requestUrl);
        auto newRequest = Quotient::NetworkAccessManager::instance()->post(request, QJsonDocument(openIdJob->jsonData()).toJson());
        connect(newRequest, &QNetworkReply::finished, this, [this, connection, newRequest]() {
            QJsonObject replyJson = QJsonDocument::fromJson(newRequest->readAll()).object();
            const auto identityServerToken = replyJson[QLatin1String("token")].toString();

            const auto requestUrl = QUrl(connection->identityServer().toString() + QStringLiteral("/_matrix/identity/v2/hash_details"));
            if (!(requestUrl.scheme() == QStringLiteral("https") || requestUrl.scheme() == QStringLiteral("http"))) {
                return;
            }

            QNetworkRequest hashRequest(requestUrl);
            hashRequest.setRawHeader("Authorization", "Bearer " + identityServerToken.toLatin1());

            auto hashReply = Quotient::NetworkAccessManager::instance()->get(hashRequest);
            connect(hashReply, &QNetworkReply::finished, this, [this, connection, identityServerToken, hashReply]() {
                QJsonObject replyJson = QJsonDocument::fromJson(hashReply->readAll()).object();
                const auto lookupPepper = replyJson[QLatin1String("lookup_pepper")].toString();

                const auto requestUrl = QUrl(connection->identityServer().toString() + QStringLiteral("/_matrix/identity/v2/lookup"));
                if (!(requestUrl.scheme() == QStringLiteral("https") || requestUrl.scheme() == QStringLiteral("http"))) {
                    return;
                }

                QNetworkRequest lookupRequest(requestUrl);
                lookupRequest.setRawHeader("Authorization", "Bearer " + identityServerToken.toLatin1());

                QJsonObject requestData = {
                    {QLatin1String("algorithm"), QLatin1String("none")},
                    {QLatin1String("pepper"), lookupPepper},
                };
                QJsonArray idLookups;
                for (const auto &id : m_threePIds) {
                    idLookups += QStringLiteral("%1 %2").arg(id.address, id.medium);
                }
                requestData[QLatin1String("addresses")] = idLookups;

                auto lookupReply = Quotient::NetworkAccessManager::instance()->post(lookupRequest, QJsonDocument(requestData).toJson(QJsonDocument::Compact));
                connect(lookupReply, &QNetworkReply::finished, this, [this, connection, lookupReply]() {
                    beginResetModel();
                    m_bindings.clear();

                    QJsonObject mappings = QJsonDocument::fromJson(lookupReply->readAll()).object()[QLatin1String("mappings")].toObject();
                    for (const auto &id : mappings.keys()) {
                        if (mappings[id] == connection->userId()) {
                            m_bindings += id.section(u' ', 0, 0);
                        }
                    }

                    endResetModel();
                });
            });
        });
    });
}

#include "moc_threepidmodel.cpp"