using Microsoft.AspNetCore.Identity;
using Raven.Client.Documents;
using Raven.Client.Documents.Linq;
using System.Security.Claims;

namespace zero.Identity;


public partial class RavenUserStore<TUser> :
  EntityStore<TUser>,
  IUserStore<TUser>,
  IUserEmailStore<TUser>,
  IUserLockoutStore<TUser>,
  IUserPasswordStore<TUser>,
  IUserClaimStore<TUser>,
  IUserSecurityStampStore<TUser>,
  IProtectedUserStore<TUser>
  where TUser : ZeroIdentityUser, new()
{
  protected bool Global { get; private set; }

  public RavenUserStore(IStoreContext storeContext, bool global = false) : base(storeContext)
  {
    Global = global; 
    Config.Database = global ? Options.For<RavenOptions>().Database : null;
    Config.IncludeInactive = true;
  }


  /// <summary>
  /// Get the Raven compare/exchange key for this user.
  /// This should be unique within the store, otherwise you can't create users with the same email in different stores.
  /// </summary>
  protected virtual string GetReservationKey(TUser user) => Constants.Database.ReservationPrefix + typeof(TUser) + ':' + user.Email;

  // <summary>
  /// Scope queries to an optional application or something else
  /// </summary>
  protected virtual IRavenQueryable<TUser> ScopeQuery(IRavenQueryable<TUser> query) => query;

  /// <summary>
  /// Whether an email is already reserved
  /// </summary>
  protected virtual async Task<bool> IsEmailReserved(TUser user, CancellationToken cancellationToken = default)
  {
    TUser existingUser = await ScopeQuery(Session.Query<TUser>()).FirstOrDefaultAsync(x => x.Email == user.Email, cancellationToken);
    return existingUser != null && existingUser.Id != user.Id;
  }


  /// <inheritdoc />
  public async Task<IdentityResult> CreateAsync(TUser user, CancellationToken cancellationToken)
  {
    if (await IsEmailReserved(user, cancellationToken))
    {
      return IdentityResult.Failed(new IdentityError
      {
        Code = "DuplicateEmail",
        Description = $"The email address {user.Email} is already taken."
      });
    }

    Result<TUser> result = await Create(user);
    return IdentityResult.Success;
  }


  /// <inheritdoc />
  public async Task<IdentityResult> DeleteAsync(TUser user, CancellationToken cancellationToken)
  {
    Result result = await Delete(user);
    return IdentityResult.Success;
  }


  /// <inheritdoc />
  public async Task<IdentityResult> UpdateAsync(TUser user, CancellationToken cancellationToken)
  {
    TUser source = await Load(user.Id);

    if (source == null)
    {
      return IdentityResult.Failed(new IdentityError
      {
        Code = "UserNotFound",
        Description = $"Could not find stored user with id {user.Id}."
      });
    }

    if (source.Email != user.Email && await IsEmailReserved(user, cancellationToken))
    {
      return IdentityResult.Failed(new IdentityError
      {
        Code = "DuplicateEmail",
        Description = $"The email address {user.Email} is already taken."
      });
    }

    await Update(user);

    return IdentityResult.Success;
  }


  /// <inheritdoc />
  public async Task<TUser> FindByIdAsync(string userId, CancellationToken cancellationToken)
  {
    return await ScopeQuery(Session.Query<TUser>()).FirstOrDefaultAsync(x => x.Id == userId, cancellationToken);
  }


  /// <inheritdoc />
  public async Task<TUser> FindByNameAsync(string normalizedUserName, CancellationToken cancellationToken)
  {
    return await ScopeQuery(Session.Query<TUser>()).FirstOrDefaultAsync(x => x.Username == normalizedUserName, cancellationToken);
  }


  /// <inheritdoc />
  public Task<string> GetNormalizedUserNameAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.Username);


  /// <inheritdoc />
  public Task<string> GetUserIdAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.Id);


  /// <inheritdoc />
  public Task<string> GetUserNameAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.Username);


  /// <inheritdoc />
  public Task SetNormalizedUserNameAsync(TUser user, string normalizedName, CancellationToken cancellationToken)
  {
    user.Username = normalizedName;
    return Task.CompletedTask;
  }


  /// <inheritdoc />
  public async Task SetUserNameAsync(TUser user, string userName, CancellationToken cancellationToken)
  {
    await SetNormalizedUserNameAsync(user, userName, cancellationToken);
  }


  /// <inheritdoc />
  void IDisposable.Dispose() { }


  /*
    * ****************************************************
    * SECURITY STAMP
    * ****************************************************
    */


  /// <inheritdoc />
  public Task<string> GetSecurityStampAsync(TUser user, CancellationToken cancellationToken)
  {
    return Task.FromResult(user.SecurityStamp);
  }


  /// <inheritdoc />
  public Task SetSecurityStampAsync(TUser user, string stamp, CancellationToken cancellationToken)
  {
    user.SecurityStamp = stamp;
    return Task.CompletedTask;
  }


  /*
    * ****************************************************
    * EMAIL
    * ****************************************************
    */


  /// <inheritdoc />
  public async Task<TUser> FindByEmailAsync(string normalizedEmail, CancellationToken cancellationToken)
  {
    return await Session.Query<TUser>().FirstOrDefaultAsync(x => x.Email == normalizedEmail, cancellationToken);
  }


  /// <inheritdoc />
  public Task<string> GetEmailAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.Email);


  /// <inheritdoc />
  public Task<bool> GetEmailConfirmedAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.IsEmailConfirmed);


  /// <inheritdoc />
  public Task<string> GetNormalizedEmailAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.Email);


  /// <inheritdoc />
  public Task SetEmailAsync(TUser user, string email, CancellationToken cancellationToken)
  {
    user.Email = email.ToLowerInvariant();
    return Task.CompletedTask;
  }


  /// <inheritdoc />
  public Task SetEmailConfirmedAsync(TUser user, bool confirmed, CancellationToken cancellationToken)
  {
    user.IsEmailConfirmed = confirmed;
    return Task.CompletedTask;
  }


  /// <inheritdoc />
  public Task SetNormalizedEmailAsync(TUser user, string normalizedEmail, CancellationToken cancellationToken)
  {
    user.Email = normalizedEmail.ToLowerInvariant();
    return Task.CompletedTask;
  }


  /*
    * ****************************************************
    * LOCKOUT
    * ****************************************************
    */


  /// <inheritdoc />
  public Task<int> GetAccessFailedCountAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.AccessFailedCount);


  /// <inheritdoc />
  public Task<bool> GetLockoutEnabledAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.LockoutEnabled);


  /// <inheritdoc />
  public Task<DateTimeOffset?> GetLockoutEndDateAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.LockoutEnd);


  /// <inheritdoc />
  public Task<int> IncrementAccessFailedCountAsync(TUser user, CancellationToken cancellationToken)
  {
    user.AccessFailedCount += 1;
    return Task.FromResult(user.AccessFailedCount);
  }


  /// <inheritdoc />
  public Task ResetAccessFailedCountAsync(TUser user, CancellationToken cancellationToken)
  {
    user.AccessFailedCount = 0;
    return Task.CompletedTask;
  }


  /// <inheritdoc />
  public Task SetLockoutEnabledAsync(TUser user, bool enabled, CancellationToken cancellationToken)
  {
    user.LockoutEnabled = enabled;
    return Task.CompletedTask;
  }


  /// <inheritdoc />
  public Task SetLockoutEndDateAsync(TUser user, DateTimeOffset? lockoutEnd, CancellationToken cancellationToken)
  {
    user.LockoutEnd = lockoutEnd;
    return Task.CompletedTask;
  }


  /*
    * ****************************************************
    * PASSWORD
    * ****************************************************
    */


  /// <inheritdoc />
  public Task<string> GetPasswordHashAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(user.PasswordHash);


  /// <inheritdoc />
  public Task<bool> HasPasswordAsync(TUser user, CancellationToken cancellationToken) => Task.FromResult(!user.PasswordHash.IsNullOrEmpty());


  /// <inheritdoc />
  public Task SetPasswordHashAsync(TUser user, string passwordHash, CancellationToken cancellationToken)
  {
    user.PasswordHash = passwordHash;
    return Task.CompletedTask;
  }


  /*
    * ****************************************************
    * CLAIM
    * ****************************************************
    */


  /// <inheritdoc />
  public async Task AddClaimsAsync(TUser user, IEnumerable<Claim> claims, CancellationToken cancellationToken)
  {
    user.Claims.AddRange(claims.Select(claim => new UserClaim(claim)));
    await Update(user);
  }


  /// <inheritdoc />
  public Task<IList<Claim>> GetClaimsAsync(TUser user, CancellationToken cancellationToken)
  {
    return Task.FromResult((IList<Claim>)user.Claims.Select(claim => claim.ToClaim()).ToList());
  }


  /// <inheritdoc />
  public async Task<IList<TUser>> GetUsersForClaimAsync(Claim claim, CancellationToken cancellationToken)
  {
    UserClaim userClaim = new(claim);
    return await ScopeQuery(Session.Query<TUser>()).Where(x => x.Claims.Any(c => c.Type == userClaim.Type && c.Value == userClaim.Value)).ToListAsync(token: cancellationToken);
  }


  /// <inheritdoc />
  public async Task RemoveClaimsAsync(TUser user, IEnumerable<Claim> claims, CancellationToken cancellationToken)
  {
    IEnumerable<UserClaim> userClaims = claims.Select(c => new UserClaim(c)).ToList();

    user.Claims = user.Claims.Except(userClaims, new UserClaimComparer()).ToList();

    await Update(user);
  }


  /// <inheritdoc />
  public async Task ReplaceClaimAsync(TUser user, Claim claim, Claim newClaim, CancellationToken cancellationToken)
  {
    UserClaim userClaim = new(claim);
    UserClaim newUserClaim = new(newClaim);

    user.Claims.Remove(userClaim);
    user.Claims.Add(newUserClaim);

    await Update(user);
  }
}