//
// Copyright Amazon.com Inc. or its affiliates.
// All Rights Reserved.
//
// SPDX-License-Identifier: Apache-2.0
//

import Foundation

import Amplify
import AWSS3
import AWSPluginsCore
import ClientRuntime
import AWSClientRuntime

/// The class confirming to AWSS3PreSignedURLBuilderBehavior which uses GetObjectInput to
/// create a pre-signed URL.
class AWSS3PreSignedURLBuilderAdapter: AWSS3PreSignedURLBuilderBehavior {
    let defaultExpiration: Int64 = 50 * 60 // 50 minutes

    let bucket: String
    let config: S3ClientConfigurationProtocol
    let logger: Logger

    /// Creates a pre-signed URL builder.
    /// - Parameter credentialsProvider: Credentials Provider.
    init(config: S3Client.S3ClientConfiguration, bucket: String, logger: Logger = storageLogger) {
        self.bucket = bucket
        self.config = config
        self.logger = logger
    }

    /// Gets pre-signed URL.
    /// - Returns: Pre-Signed URL
    func getPreSignedURL(key: String,
                         signingOperation: AWSS3SigningOperation,
                         accelerate: Bool? = nil,
                         expires: Int64? = nil) async throws -> URL {
        let expiresDate = Date(timeIntervalSinceNow: Double(expires ?? defaultExpiration))
        let expiration = expiresDate.timeIntervalSinceNow
        let config = (accelerate == nil) ? self.config : S3ClientConfigurationProxy(
            target: self.config,
            accelerateOverride: accelerate)
        let preSignedUrl: URL?
        switch signingOperation {
        case .getObject:
            let input = GetObjectInput(bucket: bucket, key: key)
            preSignedUrl = try await input.presignURL(
                config: config,
                expiration: expiration)
        case .putObject:
            let input = PutObjectInput(bucket: bucket, key: key)
            preSignedUrl = try await input.presignURL(
                config: config,
                expiration: expiration)
        case .uploadPart(let partNumber, let uploadId):
            let input = UploadPartInput(bucket: bucket, key: key, partNumber: partNumber, uploadId: uploadId)
            preSignedUrl = try await input.customPresignURL(
                config: config,
                expiration: expiration)
        }
        guard let escapedURL = urlWithEscapedToken(preSignedUrl) else {
            throw AWSS3PreSignedURLBuilderError.failed(reason: "Failed to get presigned URL.", error: nil)
        }
        return escapedURL
    }

    private func urlWithEscapedToken(_ url: URL?) -> URL? {
        guard let url = url,
              var components = URLComponents(string: url.absoluteString),
              var token = components.queryItems?.first(where: { $0.name == "X-Amz-Security-Token" }) else {
                  return nil
              }
        token.value = token.value?.addingPercentEncoding(withAllowedCharacters: .alphanumerics)
        components.port = nil
        components.percentEncodedQueryItems?.removeAll(where: { $0.name == "X-Amz-Security-Token" })
        components.percentEncodedQueryItems?.append(token)
        return components.url
    }
}