/*
In this file we handle git lfs objects downloads and uploads
*/

package lfs

import (
	"bytes"
	"crypto/sha256"
	"encoding/hex"
	"fmt"
	"io"
	"io/ioutil"
	"net/http"
	"os"
	"path/filepath"

	"gitlab.com/gitlab-org/gitlab-workhorse/internal/api"
	"gitlab.com/gitlab-org/gitlab-workhorse/internal/helper"
)

func PutStore(a *api.API, h http.Handler) http.Handler {
	return lfsAuthorizeHandler(a, handleStoreLfsObject(h))
}

func lfsAuthorizeHandler(myAPI *api.API, handleFunc api.HandleFunc) http.Handler {
	return myAPI.PreAuthorizeHandler(func(w http.ResponseWriter, r *http.Request, a *api.Response) {

		if a.StoreLFSPath == "" {
			helper.Fail500(w, r, fmt.Errorf("lfsAuthorizeHandler: StoreLFSPath empty"))
			return
		}

		if a.LfsOid == "" {
			helper.Fail500(w, r, fmt.Errorf("lfsAuthorizeHandler: LfsOid empty"))
			return
		}

		if err := os.MkdirAll(a.StoreLFSPath, 0700); err != nil {
			helper.Fail500(w, r, fmt.Errorf("lfsAuthorizeHandler: mkdir StoreLFSPath: %v", err))
			return
		}

		handleFunc(w, r, a)
	}, "/authorize")
}

func handleStoreLfsObject(h http.Handler) api.HandleFunc {
	return func(w http.ResponseWriter, r *http.Request, a *api.Response) {
		file, err := ioutil.TempFile(a.StoreLFSPath, a.LfsOid)
		if err != nil {
			helper.Fail500(w, r, fmt.Errorf("handleStoreLfsObject: create tempfile: %v", err))
			return
		}
		defer os.Remove(file.Name())
		defer file.Close()

		hash := sha256.New()
		hw := io.MultiWriter(hash, file)

		written, err := io.Copy(hw, r.Body)
		if err != nil {
			helper.Fail500(w, r, fmt.Errorf("handleStoreLfsObject: copy body to tempfile: %v", err))
			return
		}
		file.Close()

		if written != a.LfsSize {
			helper.Fail500(w, r, fmt.Errorf("handleStoreLfsObject: expected size %d, wrote %d", a.LfsSize, written))
			return
		}

		shaStr := hex.EncodeToString(hash.Sum(nil))
		if shaStr != a.LfsOid {
			helper.Fail500(w, r, fmt.Errorf("handleStoreLfsObject: expected sha256 %s, got %s", a.LfsOid, shaStr))
			return
		}

		// Inject header and body
		r.Header.Set("X-GitLab-Lfs-Tmp", filepath.Base(file.Name()))
		r.Body = ioutil.NopCloser(&bytes.Buffer{})
		r.ContentLength = 0

		// And proxy the request
		h.ServeHTTP(w, r)
	}
}