package controllers

import (
	"log"
	"net/http"
	"smt/models"
	"smt/utils/token"

	"github.com/gin-gonic/gin"
)

type RetrieveInput struct {
	DeviceName     string `json:"deviceName"`
	DeviceCategory string `json:"deviceCategory"`
}

func RetrieveSecret(c *gin.Context) {
	var input RetrieveInput

	// Validate the input matches our struct
	if err := c.ShouldBindJSON(&input); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}
	log.Printf("RetrieveSecret received JSON input '%v'\n", input)

	// Get the user and role id of the requestor
	u, err := models.GetUserRoleFromToken(c)
	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	// Populate fields
	s := models.Secret{}
	s.RoleId = u.RoleId
	s.DeviceName = input.DeviceName
	s.DeviceCategory = input.DeviceCategory

	results, err := models.GetSecrets(&s)
	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	if len(results) == 1 {
		// output results as json
		c.JSON(http.StatusOK, gin.H{"message": "success", "data": results})
	} else if len(results) > 1 {
		c.JSON(http.StatusBadRequest, gin.H{"error": "found multiple matching secrets, use retrieveMultiple instead"})
		return
	} else {
		c.JSON(http.StatusBadRequest, gin.H{"error": "found no matching secrets"})
		return
	}
}

func RetrieveSecretByDevicename(c *gin.Context) {
	DeviceName := c.Param("devicename")

	if DeviceName == "" {
		c.JSON(http.StatusBadRequest, gin.H{"error": "no devicename value specified"})
		return
	}

	// Create object based on specified data
	s := models.Secret{DeviceName: DeviceName}
	//s.DeviceName = DeviceName

	retrieveSpecifiedSecret(&s, c)
}

func RetrieveSecretByDevicecategory(c *gin.Context) {
	DeviceCategory := c.Param("devicecategory")

	if DeviceCategory == "" {
		c.JSON(http.StatusBadRequest, gin.H{"error": "no devicecategory value specified"})
		return
	}

	// Create object based on specified data
	s := models.Secret{DeviceCategory: DeviceCategory}

	retrieveSpecifiedSecret(&s, c)
}

func retrieveSpecifiedSecret(s *models.Secret, c *gin.Context) {
	// Get the user and role id of the requestor
	u, err := models.GetUserRoleFromToken(c)
	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}
	s.RoleId = u.RoleId

	results, err := models.GetSecrets(s)
	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	if len(results) == 1 {
		// output results as json
		c.JSON(http.StatusOK, gin.H{"message": "success", "data": results})
	} else if len(results) > 1 {
		c.JSON(http.StatusBadRequest, gin.H{"error": "found multiple matching secrets"})
		return
	} else {
		c.JSON(http.StatusBadRequest, gin.H{"error": "found no matching secrets"})
		return
	}
}

func RetrieveMultpleSecrets(c *gin.Context) {
	var input RetrieveInput

	// Validate the input matches our struct
	if err := c.ShouldBindJSON(&input); err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}
	log.Printf("StoreSecret received JSON input '%v'\n", input)

	// Get the user and role id of the requestor
	user_id, err := token.ExtractTokenID(c)

	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	u, err := models.GetUserRoleByID(user_id)

	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	// Populate fields
	s := models.Secret{}
	s.RoleId = u.RoleId
	s.DeviceName = input.DeviceName
	s.DeviceCategory = input.DeviceCategory

	results, err := models.GetSecrets(&s)
	if err != nil {
		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
		return
	}

	// output results as json
	c.JSON(http.StatusOK, gin.H{"message": "success", "data": results})
}