import 'dart:convert';
import 'dart:io';

import 'package:flutter/material.dart';
import 'package:flutter_secure_storage/flutter_secure_storage.dart';
import 'package:goatagent/screens/auth.dart';
import 'package:oauth2/oauth2.dart' as oauth2;

class AuthGuard {
  static final AuthGuard _singleton = AuthGuard._internal();

  final authorizationEndpoint =
      Uri.parse('https://id.smartsheep.studio/auth/o/connect');
  final tokenEndpoint =
      Uri.parse('https://id.smartsheep.studio/api/auth/token');
  final userinfoEndpoint =
      Uri.parse('https://id.smartsheep.studio/api/users/me');
  final redirectUrl = Uri.parse('goatagent://auth');

  static const clientId = "goatagent";
  static const clientSecret = "_F4%q2Eea3";

  static const storage = FlutterSecureStorage();
  static const storageKey = "identity";
  static const profileKey = "profiles";

  factory AuthGuard() {
    return _singleton;
  }

  oauth2.Client? client;

  Future<bool> pickClient() async {
    if (await storage.containsKey(key: storageKey)) {
      var credentials =
          oauth2.Credentials.fromJson((await storage.read(key: storageKey))!);
      client = oauth2.Client(credentials,
          identifier: clientId, secret: clientSecret);
      print(await storage.readAll());
      return true;
    } else {
      return false;
    }
  }

  Future<oauth2.Client> createClient(BuildContext context) async {
    // If logged in
    if (await pickClient()) {
      return client!;
    }

    var grant = oauth2.AuthorizationCodeGrant(
      clientId,
      authorizationEndpoint,
      tokenEndpoint,
      secret: clientSecret,
      basicAuth: false,
    );

    var authorizationUrl = grant.getAuthorizationUrl(redirectUrl);

    if (Platform.isAndroid || Platform.isIOS) {
      // Let Goatpass know it is embed in an app
      authorizationUrl = authorizationUrl.replace(
          queryParameters: {"embedded": "yes"}
            ..addAll(authorizationUrl.queryParameters));

      // Use WebView to get authorization url
      var responseUrl = await Navigator.of(context).push(MaterialPageRoute(
        builder: (context) => AuthorizationPage(authorizationUrl),
      ));

      var responseUri = Uri.parse(responseUrl);
      return await grant
          .handleAuthorizationResponse(responseUri.queryParameters);
    } else {
      throw UnimplementedError("unsupported platform");
    }
  }

  Future<void> login(BuildContext context) async {
    try {
      client = await createClient(context);
      var userinfo = await client!.read(userinfoEndpoint);

      storage.write(key: profileKey, value: userinfo);
      storage.write(key: storageKey, value: client!.credentials.toJson());
    } catch (e) {
      print(e);
    }
  }

  void logout() {
    try {
      storage.delete(key: profileKey);
      storage.delete(key: storageKey);
    } catch (e) {
      print(e);
    }
  }

  Future<bool> isAuthorized() async {
    const storage = FlutterSecureStorage();
    return await storage.containsKey(key: storageKey);
  }

  Future<dynamic> readProfiles() async {
    const storage = FlutterSecureStorage();
    return jsonDecode(await storage.read(key: profileKey) ?? "{}");
  }

  AuthGuard._internal();
}