package jwt

import (
	"gitee.com/h79/goutils/auth/token"
)

// 保证 Authenticate struct implement token.Authenticate
var _ token.Authenticate = (*Authenticate)(nil)

type Authenticate struct {
	secret  token.Secret
	factory token.Factory
}

func New(secret token.Secret) *Authenticate {
	return NewWith(secret, &defTokenFactory)
}

func NewWith(secret token.Secret, factory token.Factory) *Authenticate {
	if factory == nil {
		factory = &defTokenFactory
	}
	return &Authenticate{secret: secret, factory: factory}
}

const Type = "jwt"

func (t *Authenticate) Type() string {
	return Type
}

// Create implement token.Authenticate interface
func (t *Authenticate) Create(source token.Source, expireSeconds int64, opts ...token.Option) (token.Token, error) {
	sec := t.secret.GetSecret(source)
	if expireSeconds > 0 {
		sec.Expire = expireSeconds
	}
	tk, err := t.factory.Create(&sec, opts...)
	if err != nil {
		return nil, err
	}
	return tk.WithVar(token.KSource, source), nil
}

// Decode implement token.Authenticate interface
func (t *Authenticate) Decode(source token.Source, tok string, opts ...token.Option) (token.Token, error) {
	return t.factory.Decode(tok, opts...)
}

// Check implement token.Authenticate interface
func (t *Authenticate) Check(source token.Source, tok string, opts ...token.Option) (token.Token, error) {
	sec := t.secret.GetSecret(source)
	return t.factory.Check(tok, &sec, opts...)
}

// SetEnabled implement token.Authenticate interface
func (t *Authenticate) SetEnabled(source token.Source, enable bool) {
	t.secret.SetEnabled(source, enable)
}

// EnableFlag implement token.Authenticate interface
func (t *Authenticate) EnableFlag(source token.Source) int {
	return t.secret.EnableFlag(source)
}