package service

import (
	"context"
	"strings"
	"time"

	"git.sundynix.cn/Blizzard/Veyra/internal/apperror"
	"golang.org/x/crypto/bcrypt"
)

type AdminCredentialRepository interface {
	ChangeAdminCredential(context.Context, string, string, string, time.Time) (string, error)
}
type AdminCredentialService struct {
	repo        AdminCredentialRepository
	development bool
}

func NewAdminCredentialService(repo AdminCredentialRepository, development bool) *AdminCredentialService {
	return &AdminCredentialService{repo: repo, development: development}
}

// Set changes only an existing active administrator and revokes its old sessions.
func (s *AdminCredentialService) Set(ctx context.Context, previousLogin, login, password string) (string, error) {
	if !s.development {
		return "", apperror.ErrForbidden
	}
	if s.repo == nil {
		return "", apperror.ErrUnavailable
	}
	previousLogin = strings.ToLower(strings.TrimSpace(previousLogin))
	login = strings.ToLower(strings.TrimSpace(login))
	if !loginPattern.MatchString(previousLogin) || !loginPattern.MatchString(login) || len(password) < 8 || len(password) > 72 {
		return "", apperror.ErrInvalidInput
	}
	hash, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
	if err != nil {
		return "", apperror.ErrUnavailable
	}
	return s.repo.ChangeAdminCredential(ctx, previousLogin, login, string(hash), time.Now().UTC())
}