package infra

import (
	"github.com/aws/aws-cdk-go/awscdk/v2"
	"github.com/aws/aws-cdk-go/awscdk/v2/awsdynamodb"
	"github.com/aws/aws-cdk-go/awscdk/v2/awslambda"
	"github.com/aws/aws-cdk-go/awscdkapigatewayv2alpha/v2"
	"github.com/aws/aws-cdk-go/awscdkapigatewayv2integrationsalpha/v2"
	"github.com/aws/constructs-go/constructs/v10"
	"github.com/aws/jsii-runtime-go"
)

type HttpLoginApiStackProps struct {
	awscdk.StackProps
}

var StageAutoDeploy map[string]bool = map[string]bool{
	"dev":        true,
	"test":       true,
	"pre":        false,
	"production": false,
}

func NewHttpLoginApiStack(scope constructs.Construct, id string, props *HttpLoginApiStackProps) constructs.Construct {
	var sprops awscdk.StackProps
	if props != nil {
		sprops = props.StackProps
	}
	stack := awscdk.NewStack(scope, &id, &sprops)

	jwt_secret := stack.Node().TryGetContext(jsii.String("jwt_secret")).(string)
	login_dynamodb_table := stack.Node().TryGetContext(jsii.String("login_dynamodb_table")).(string)
	stage := stack.Node().TryGetContext(jsii.String("stage")).(string)
	login_lambda_code_absolute_dir := stack.Node().TryGetContext(jsii.String("login_lambda_code_absolute_dir")).(string)

	loginTable := awsdynamodb.NewTable(stack, jsii.String("loginTable"), &awsdynamodb.TableProps{
		PartitionKey:  &awsdynamodb.Attribute{Name: jsii.String("username"), Type: awsdynamodb.AttributeType_STRING},
		RemovalPolicy: awscdk.RemovalPolicy_DESTROY,
		Encryption:    awsdynamodb.TableEncryption_AWS_MANAGED,
		//TableName:     jsii.String(login_dynamodb_table + "_" + stage),
		TableName: jsii.String(login_dynamodb_table),
		//ReadCapacity:  jsii.Number(7),
	})

	loginHandler := awslambda.NewFunction(stack, jsii.String("loginHandler"), &awslambda.FunctionProps{
		Code:    awslambda.Code_FromAsset(jsii.String(login_lambda_code_absolute_dir), nil),
		Runtime: awslambda.Runtime_NODEJS_18_X(),
		Handler: jsii.String("index.handler"),
		Environment: &map[string]*string{
			"TOKEN_KEY": jsii.String(jwt_secret),
			// if want a dynamodb table in the diff region, don't care, just use in the same region for different stage table
			"USER_TABLE_NAME": loginTable.TableName(),
		},
		FunctionName: jsii.String("chatbot-login-" + stage),
		Description:  jsii.String("user login and authentication user information from dynamodb, ok return jwt for authorization"),
	})

	loginTable.GrantReadWriteData(loginHandler)

	httpApi := awscdkapigatewayv2alpha.NewHttpApi(stack, jsii.String("http-gw-chatbot"), &awscdkapigatewayv2alpha.HttpApiProps{
		ApiName: jsii.String("http-gateway-chatbot-" + stage),
		CorsPreflight: &awscdkapigatewayv2alpha.CorsPreflightOptions{
			AllowCredentials: jsii.Bool(false),
			AllowHeaders: &[]*string{
				jsii.String("*"),
			},
			AllowMethods: &[]awscdkapigatewayv2alpha.CorsHttpMethod{
				awscdkapigatewayv2alpha.CorsHttpMethod_ANY,
				//awscdkapigatewayv2alpha.CorsHttpMethod_GET,
				//awscdkapigatewayv2alpha.CorsHttpMethod_POST,
			},
			AllowOrigins: &[]*string{
				jsii.String("*"),
			},
		},
		CreateDefaultStage: jsii.Bool(true),
		Description:        jsii.String("htttp api gateway"),
	})
	httpApi.AddRoutes(&awscdkapigatewayv2alpha.AddRoutesOptions{
		Integration: awscdkapigatewayv2integrationsalpha.NewHttpLambdaIntegration(
			jsii.String("login-route"), loginHandler,
			&awscdkapigatewayv2integrationsalpha.HttpLambdaIntegrationProps{}),
		Path:    jsii.String("/login"),
		Methods: &[]awscdkapigatewayv2alpha.HttpMethod{awscdkapigatewayv2alpha.HttpMethod_POST},
	})

	if _, ok := StageAutoDeploy[stage]; !ok {
		return stack
	}
	httpApi.AddStage(jsii.String(stage), &awscdkapigatewayv2alpha.HttpStageOptions{
		AutoDeploy: jsii.Bool(StageAutoDeploy[stage]),
		StageName:  jsii.String(stage),
	})

	awscdk.NewCfnOutput(stack, jsii.String("httpGwApiUrl"), &awscdk.CfnOutputProps{
		Value: httpApi.Url(),
	})

	return stack
}