<script setup lang="ts">
import { onMounted, ref } from 'vue';
import { useI18n } from 'vue-i18n'

// @ts-ignore
import { useGlobalState } from '../../store'
// @ts-ignore
import { api } from '../../api'
import constant from '../../constant'
import { UserOauth2Settings } from '../../models';

const { loading } = useGlobalState()
// @ts-ignore
const message = useMessage()

const { t } = useI18n({
    messages: {
        en: {
            save: 'Save',
            successTip: 'Save Success',
            enable: 'Enable',
            enableMailAllowList: 'Enable Mail Address Allow List(Manually enterable)',
            mailAllowList: 'Mail Address Allow List',
            addOauth2: 'Add Oauth2',
            name: 'Name',
            oauth2Type: 'Oauth2 Type',
            tip: 'Third-party login will automatically use the user\'s email to register an account (the same email will be regarded as the same account), this account is the same as the registered account, and you can also set the password through the forget password',
        },
        zh: {
            save: '保存',
            successTip: '保存成功',
            enable: '启用',
            enableMailAllowList: '启用邮件地址白名单(可手动输入, 回车增加)',
            mailAllowList: '邮件地址白名单',
            addOauth2: '添加 Oauth2',
            name: '名称',
            oauth2Type: 'Oauth2 类型',
            tip: '第三方登录会自动使用用户邮箱注册账号(邮箱相同将视为同一账号), 此账号和注册的账号相同, 也可以通过忘记密码设置密码',
        }
    }
});

const mailAllowOptions = constant.COMMOM_MAIL.map((item) => {
    return { label: item, value: item }
})

const userOauth2Settings = ref([] as UserOauth2Settings[])
const showAddOauth2 = ref(false)
const newOauth2Name = ref('')
const newOauth2Type = ref('custom')

const fetchData = async () => {
    try {
        const res = await api.fetch(`/admin/user_oauth2_settings`)
        Object.assign(userOauth2Settings.value, res)
    } catch (error) {
        message.error((error as Error).message || "error");
    }
}

const save = async () => {
    try {
        await api.fetch(`/admin/user_oauth2_settings`, {
            method: 'POST',
            body: JSON.stringify(userOauth2Settings.value)
        })
        message.success(t('successTip'))
    } catch (error) {
        message.error((error as Error).message || "error");
    }
}

const addNewOauth2 = () => {
    const authorizationURL = () => {
        switch (newOauth2Type.value) {
            case 'github':
                return 'https://github.com/login/oauth/authorize'
            case 'authentik':
                return 'https://youdomain/application/o/authorize/'
            default:
                return ''
        }
    }
    const accessTokenURL = () => {
        switch (newOauth2Type.value) {
            case 'github':
                return 'https://github.com/login/oauth/access_token'
            case 'authentik':
                return 'https://youdomain/application/o/token/'
            default:
                return ''
        }
    }
    const accessTokenFormat = () => {
        switch (newOauth2Type.value) {
            case 'github':
                return 'json'
            case 'authentik':
                return 'urlencoded'
            default:
                return ''
        }
    }
    const userInfoURL = () => {
        switch (newOauth2Type.value) {
            case 'github':
                return 'https://api.github.com/user'
            case 'authentik':
                return 'https://youdomain/application/o/userinfo/'
            default:
                return ''
        }
    }
    const userEmailKey = () => {
        switch (newOauth2Type.value) {
            case 'github':
                return 'email'
            case 'authentik':
                return 'email'
            default:
                return ''
        }
    }
    const scope = () => {
        switch (newOauth2Type.value) {
            case 'github':
                return 'user:email'
            case 'authentik':
                return 'email openid'
            default:
                return ''
        }
    }
    userOauth2Settings.value.push({
        name: newOauth2Name.value,
        clientID: '',
        clientSecret: '',
        authorizationURL: authorizationURL(),
        accessTokenURL: accessTokenURL(),
        accessTokenFormat: accessTokenFormat(),
        userInfoURL: userInfoURL(),
        userEmailKey: userEmailKey(),
        redirectURL: `${window.location.origin}/user/oauth2/callback`,
        logoutURL: '',
        scope: scope(),
        enableMailAllowList: false,
        mailAllowList: constant.COMMOM_MAIL
    } as UserOauth2Settings)
    newOauth2Name.value = ''
    showAddOauth2.value = false
}

const accessTokenFormatOptions = [
    { label: 'json', value: 'json' },
    { label: 'urlencoded', value: 'urlencoded' },
]

onMounted(async () => {
    await fetchData();
})
</script>

<template>
    <div class="center">
        <n-modal v-model:show="showAddOauth2" preset="dialog" :title="t('addOauth2')">
            <n-form>
                <n-form-item-row :label="t('name')" required>
                    <n-input v-model:value="newOauth2Name" />
                </n-form-item-row>
                <n-form-item-row :label="t('oauth2Type')" required>
                    <n-radio-group v-model:value="newOauth2Type">
                        <n-radio-button value="github" label="Github" />
                        <n-radio-button value="authentik" label="Authentik" />
                        <n-radio-button value="custom" label="Custom" />
                    </n-radio-group>
                </n-form-item-row>
            </n-form>
            <template #action>
                <n-button :loading="loading" @click="addNewOauth2" size="small" tertiary type="primary">
                    {{ t('addOauth2') }}
                </n-button>
            </template>
        </n-modal>
        <n-card :bordered="false" embedded style="max-width: 600px;">
            <n-alert :show-icon="false" type="warning" closable style="margin-bottom: 10px;">
                {{ t("tip") }}
            </n-alert>
            <n-flex justify="end">
                <n-button @click="showAddOauth2 = true" secondary :loading="loading">
                    {{ t('addOauth2') }}
                </n-button>
                <n-button @click="save" type="primary" :loading="loading">
                    {{ t('save') }}
                </n-button>
            </n-flex>
            <n-collapse default-expanded-names="1" accordion>
                <n-collapse-item v-for="(item, index) in userOauth2Settings" :key="index" :title="item.name">
                    <n-form :model="item">
                        <n-form-item-row :label="t('name')" required>
                            <n-input v-model:value="item.name" />
                        </n-form-item-row>
                        <n-form-item-row label="Client ID" required>
                            <n-input v-model:value="item.clientID" />
                        </n-form-item-row>
                        <n-form-item-row label="Client Secret" required>
                            <n-input v-model:value="item.clientSecret" type="password" show-password-on="click" />
                        </n-form-item-row>
                        <n-form-item-row label="Authorization URL" required>
                            <n-input v-model:value="item.authorizationURL" />
                        </n-form-item-row>
                        <n-form-item-row label="Access Token URL" required>
                            <n-input v-model:value="item.accessTokenURL" />
                        </n-form-item-row>
                        <n-form-item-row label="Access Token accessTokenFormat" required>
                            <n-select v-model:value="item.accessTokenFormat" :options="accessTokenFormatOptions" />
                        </n-form-item-row>
                        <n-form-item-row label="User Info URL" required>
                            <n-input v-model:value="item.userInfoURL" />
                        </n-form-item-row>
                        <n-form-item-row label="User Email Key" required>
                            <n-input v-model:value="item.userEmailKey" />
                        </n-form-item-row>
                        <n-form-item-row label="Redirect URL" required>
                            <n-input v-model:value="item.redirectURL" />
                        </n-form-item-row>
                        <n-form-item-row label="Scope" required>
                            <n-input v-model:value="item.scope" />
                        </n-form-item-row>
                        <n-form-item-row :label="t('enableMailAllowList')">
                            <n-input-group>
                                <n-checkbox v-model:checked="item.enableMailAllowList" style="width: 20%;">
                                    {{ t('enable') }}
                                </n-checkbox>
                                <n-select v-model:value="item.mailAllowList" v-if="item.enableMailAllowList" filterable
                                    multiple tag style="width: 80%;" :options="mailAllowOptions"
                                    :placeholder="t('mailAllowList')" />
                            </n-input-group>
                        </n-form-item-row>
                    </n-form>
                </n-collapse-item>
            </n-collapse>
        </n-card>
    </div>
</template>

<style scoped>
.center {
    display: flex;
    text-align: left;
    place-items: center;
    justify-content: center;
}
</style>
