package auth_steps

/*
   This package provides auth initialization. It is a wrapper around the
   go.skia.org/infra/go/auth package.
*/

import (
	"context"
	"fmt"
	"net/http"

	"go.skia.org/infra/go/httputils"
	"go.skia.org/infra/go/luciauth"
	"go.skia.org/infra/task_driver/go/td"
	"golang.org/x/oauth2"
	"golang.org/x/oauth2/google"
)

func Init(ctx context.Context, local bool, scopes ...string) (oauth2.TokenSource, error) {
	if ts := ctx.Value(contextKey); ts != nil {
		switch v := ts.(type) {
		case oauth2.TokenSource:
			return v, nil
		default:
			panic(fmt.Sprintf("Unknown value for contextKey: %v", v))
		}
	}
	var ts oauth2.TokenSource
	err := td.Do(ctx, td.Props("Auth Init").Infra(), func(context.Context) error {
		var err error
		if local {
			ts, err = google.DefaultTokenSource(ctx, scopes...)
		} else {
			ts, err = luciauth.NewLUCIContextTokenSource(scopes...)
		}
		return err
	})
	return ts, err
}

func HttpClient(ctx context.Context, ts oauth2.TokenSource) *http.Client {
	return td.HttpClient(ctx, httputils.DefaultClientConfig().WithTokenSource(ts).With2xxOnly().Client())
}

func InitHttpClient(ctx context.Context, local bool, scopes ...string) (*http.Client, oauth2.TokenSource, error) {
	ts, err := Init(ctx, local, scopes...)
	if err != nil {
		return nil, nil, err
	}
	return HttpClient(ctx, ts), ts, nil
}

type contextKeyType string

const contextKey contextKeyType = "overwriteTokenSource"

// WithTokenSource returns a context.Context that will make use of the provided TokenSource
// if the context is passed into auth_steps.Init instead of getting a real token source.
func WithTokenSource(ctx context.Context, ts oauth2.TokenSource) context.Context {
	return context.WithValue(ctx, contextKey, ts)
}