package bootstrap

import (
	"github.com/steveiliop56/tinyauth/internal/service"

	"github.com/rs/zerolog/log"
)

type Services struct {
	accessControlService *service.AccessControlsService
	authService          *service.AuthService
	databaseService      *service.DatabaseService
	dockerService        *service.DockerService
	ldapService          *service.LdapService
	oauthBrokerService   *service.OAuthBrokerService
	oidcService          *service.OIDCService
}

func (app *BootstrapApp) initServices() (Services, error) {
	services := Services{}

	databaseService := service.NewDatabaseService(service.DatabaseServiceConfig{
		DatabasePath: app.config.DatabasePath,
	})

	err := databaseService.Init()

	if err != nil {
		return Services{}, err
	}

	services.databaseService = databaseService

	ldapService := service.NewLdapService(service.LdapServiceConfig{
		Address:      app.config.Ldap.Address,
		BindDN:       app.config.Ldap.BindDN,
		BindPassword: app.config.Ldap.BindPassword,
		BaseDN:       app.config.Ldap.BaseDN,
		Insecure:     app.config.Ldap.Insecure,
		SearchFilter: app.config.Ldap.SearchFilter,
	})

	err = ldapService.Init()

	if err == nil {
		services.ldapService = ldapService
	} else {
		log.Warn().Err(err).Msg("Failed to initialize LDAP service, continuing without it")
	}

	dockerService := service.NewDockerService()

	err = dockerService.Init()

	if err != nil {
		return Services{}, err
	}

	services.dockerService = dockerService

	accessControlsService := service.NewAccessControlsService(dockerService)

	err = accessControlsService.Init()

	if err != nil {
		return Services{}, err
	}

	services.accessControlService = accessControlsService

	authService := service.NewAuthService(service.AuthServiceConfig{
		Users:             app.context.users,
		OauthWhitelist:    app.config.OAuth.Whitelist,
		SessionExpiry:     app.config.Auth.SessionExpiry,
		SecureCookie:      app.config.Auth.SecureCookie,
		CookieDomain:      app.context.cookieDomain,
		LoginTimeout:      app.config.Auth.LoginTimeout,
		LoginMaxRetries:   app.config.Auth.LoginMaxRetries,
		SessionCookieName: app.context.sessionCookieName,
	}, dockerService, ldapService, databaseService.GetDatabase())

	err = authService.Init()

	if err != nil {
		return Services{}, err
	}

	services.authService = authService

	oauthBrokerService := service.NewOAuthBrokerService(app.context.oauthProviders)

	err = oauthBrokerService.Init()

	if err != nil {
		return Services{}, err
	}

	services.oauthBrokerService = oauthBrokerService

	// Initialize OIDC service if enabled
	if app.config.OIDC.Enabled {
		issuer := app.config.OIDC.Issuer
		if issuer == "" {
			issuer = app.config.AppURL
		}

		oidcService := service.NewOIDCService(service.OIDCServiceConfig{
			AppURL:            app.config.AppURL,
			Issuer:             issuer,
			AccessTokenExpiry:  app.config.OIDC.AccessTokenExpiry,
			IDTokenExpiry:     app.config.OIDC.IDTokenExpiry,
			Database:           databaseService.GetDatabase(),
		})

		err = oidcService.Init()
		if err != nil {
			log.Warn().Err(err).Msg("Failed to initialize OIDC service, continuing without it")
		} else {
			services.oidcService = oidcService
			log.Info().Msg("OIDC service initialized")

			// Sync clients from config
			if len(app.config.OIDC.Clients) > 0 {
				err = oidcService.SyncClientsFromConfig(app.config.OIDC.Clients)
				if err != nil {
					log.Warn().Err(err).Msg("Failed to sync OIDC clients from config")
				} else {
					log.Info().Int("count", len(app.config.OIDC.Clients)).Msg("Synced OIDC clients from config")
				}
			}
		}
	}

	return services, nil
}