package jwt

import (
	"gitee.com/h79/goutils/auth/token"
	"gitee.com/h79/goutils/common/secret"
)

// 保证 Authenticate struct implement token.Authenticate
var _ token.Authenticate = (*Authenticate)(nil)

type Authenticate struct {
	secret token.Secret
}

func New(secret token.Secret) *Authenticate {
	return &Authenticate{secret: secret}
}

const Type = "jwt"

func (t *Authenticate) Type() string {
	return Type
}

// Create implement token.Authenticate interface
func (t *Authenticate) Create(source token.Source, expireSeconds int64) (token.Token, error) {
	sec := t.secret.GetSecret(source)
	if expireSeconds <= 0 {
		expireSeconds = sec.Expire
	}
	st := secret.Secret{
		Value:  sec.Value,
		Expire: expireSeconds,
	}
	return NewToken(&st).WithSource(source), nil
}

// Decode implement token.Authenticate interface
func (t *Authenticate) Decode(source token.Source, tok string) (token.Token, error) {
	return DecodeToken(tok)
}

// Check implement token.Authenticate interface
func (t *Authenticate) Check(source token.Source, tok string) (token.Token, error) {
	sec := t.secret.GetSecret(source)
	return VerifyToken(tok, &sec)
}

// SetEnabled implement token.Authenticate interface
func (t *Authenticate) SetEnabled(source token.Source, enable bool) {
	t.secret.SetEnabled(source, enable)
}

// EnableFlag implement token.Authenticate interface
func (t *Authenticate) EnableFlag(source token.Source) int {
	return t.secret.EnableFlag(source)
}