package jwt

import (
	"gitee.com/h79/goutils/auth/token"
	"gitee.com/h79/goutils/common/secret"
)

// 保证 Authenticate struct implement token.Authenticate
var _ token.Authenticate = (*Authenticate)(nil)

type Authenticate struct {
	secret token.Secret
}

func New(secret token.Secret) *Authenticate {
	return &Authenticate{secret: secret}
}

const Type = "jwt"

func (t *Authenticate) Type() string {
	return Type
}

// Create implement token.Authenticate interface
func (t *Authenticate) Create(source token.Source, expireSeconds int64, opts ...token.Option) (token.Token, error) {
	sec := t.secret.GetSecret(source)
	if expireSeconds <= 0 {
		expireSeconds = sec.Expire
	}
	st := secret.Secret{
		Value:  sec.Value,
		Expire: expireSeconds,
	}
	return NewToken(&st, base64Enabled(opts...)).WithSource(source), nil
}

// Decode implement token.Authenticate interface
func (t *Authenticate) Decode(source token.Source, tok string, opts ...token.Option) (token.Token, error) {
	if base64Enabled(opts...) {
		return DecodeToken(tok)
	}
	return DecodeTokenNoBase64(tok)
}

// Check implement token.Authenticate interface
func (t *Authenticate) Check(source token.Source, tok string, opts ...token.Option) (token.Token, error) {
	sec := t.secret.GetSecret(source)
	if base64Enabled(opts...) {
		return VerifyToken(tok, &sec)
	}
	return VerifyTokenNoBase64(tok, &sec)
}

// SetEnabled implement token.Authenticate interface
func (t *Authenticate) SetEnabled(source token.Source, enable bool) {
	t.secret.SetEnabled(source, enable)
}

// EnableFlag implement token.Authenticate interface
func (t *Authenticate) EnableFlag(source token.Source) int {
	return t.secret.EnableFlag(source)
}

func base64Enabled(opts ...token.Option) bool {
	if len(opts) == 0 {
		// 默认base64
		return true
	}
	for i := range opts {
		if opts[i].Base64 {
			return true
		}
	}
	return false
}