/*
 * Licensed under the Apache License, Version 2.0 (http://www.apache.org/licenses/LICENSE-2.0)
 * See https://github.com/openiddict/openiddict-core for more information concerning
 * the license and the contributors participating to this project.
 */

using System.ComponentModel;
using System.Net.Http;
using System.Net.Http.Headers;
using System.Net.Mail;
using System.Reflection;
using System.Security.Cryptography.X509Certificates;
using OpenIddict.Client;
using OpenIddict.Client.SystemNetHttp;
using Polly;

namespace Microsoft.Extensions.DependencyInjection;

/// <summary>
/// Exposes the necessary methods required to configure the OpenIddict client/System.Net.Http integration.
/// </summary>
public sealed class OpenIddictClientSystemNetHttpBuilder
{
    /// <summary>
    /// Initializes a new instance of <see cref="OpenIddictClientBuilder"/>.
    /// </summary>
    /// <param name="services">The services collection.</param>
    public OpenIddictClientSystemNetHttpBuilder(IServiceCollection services)
        => Services = services ?? throw new ArgumentNullException(nameof(services));

    /// <summary>
    /// Gets the services collection.
    /// </summary>
    [EditorBrowsable(EditorBrowsableState.Never)]
    public IServiceCollection Services { get; }

    /// <summary>
    /// Amends the default OpenIddict client/System.Net.Http configuration.
    /// </summary>
    /// <param name="configuration">The delegate used to configure the OpenIddict options.</param>
    /// <remarks>This extension can be safely called multiple times.</remarks>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder Configure(Action<OpenIddictClientSystemNetHttpOptions> configuration)
    {
        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        Services.Configure(configuration);

        return this;
    }

    /// <summary>
    /// Configures the <see cref="HttpClient"/> used by the OpenIddict client/System.Net.Http integration.
    /// </summary>
    /// <remarks>
    /// Note: customizations configured using this method apply to all client registrations.
    /// </remarks>
    /// <param name="configuration">The delegate used to configure the <see cref="HttpClient"/>.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    [EditorBrowsable(EditorBrowsableState.Advanced)]
    public OpenIddictClientSystemNetHttpBuilder ConfigureHttpClient(Action<HttpClient> configuration)
    {
        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        return ConfigureHttpClient((registration, client) => configuration(client));
    }

    /// <summary>
    /// Configures the <see cref="HttpClient"/> used by the OpenIddict client/System.Net.Http integration.
    /// </summary>
    /// <remarks>
    /// Note: customizations configured using this method only apply
    /// to client registrations that use the specified provider name.
    /// </remarks>
    /// <param name="provider">The provider name, to which the customizations are applied.</param>
    /// <param name="configuration">The delegate used to configure the <see cref="HttpClient"/>.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    [EditorBrowsable(EditorBrowsableState.Advanced)]
    public OpenIddictClientSystemNetHttpBuilder ConfigureHttpClient(string provider, Action<HttpClient> configuration)
    {
        if (string.IsNullOrEmpty(provider))
        {
            throw new ArgumentException(SR.FormatID0366(nameof(provider)), nameof(provider));
        }

        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        return ConfigureHttpClient((registration, client) =>
        {
            if (string.Equals(registration.ProviderName, provider, StringComparison.Ordinal))
            {
                configuration(client);
            }
        });
    }

    /// <summary>
    /// Configures the <see cref="HttpClient"/> used by the OpenIddict client/System.Net.Http integration.
    /// </summary>
    /// <remarks>
    /// Note: customizations configured using this method apply to all client registrations, but the
    /// configuration delegate can restrict the applied customizations to specific instances.
    /// </remarks>
    /// <param name="configuration">The delegate used to configure the <see cref="HttpClient"/>.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    [EditorBrowsable(EditorBrowsableState.Advanced)]
    public OpenIddictClientSystemNetHttpBuilder ConfigureHttpClient(Action<OpenIddictClientRegistration, HttpClient> configuration)
    {
        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        return Configure(options => options.HttpClientActions.Add(configuration));
    }

    /// <summary>
    /// Configures the <see cref="HttpClientHandler"/> used by the OpenIddict client/System.Net.Http integration.
    /// </summary>
    /// <remarks>
    /// Note: customizations configured using this method apply to all client registrations.
    /// </remarks>
    /// <param name="configuration">The delegate used to configure the <see cref="HttpClientHandler"/>.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    [EditorBrowsable(EditorBrowsableState.Advanced)]
    public OpenIddictClientSystemNetHttpBuilder ConfigureHttpClientHandler(Action<HttpClientHandler> configuration)
    {
        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        return ConfigureHttpClientHandler((registration, handler) => configuration(handler));
    }

    /// <summary>
    /// Configures the <see cref="HttpClientHandler"/> used by the OpenIddict client/System.Net.Http integration.
    /// </summary>
    /// <remarks>
    /// Note: customizations configured using this method only apply
    /// to client registrations that use the specified provider name.
    /// </remarks>
    /// <param name="provider">The provider name, to which the customizations are applied.</param>
    /// <param name="configuration">The delegate used to configure the <see cref="HttpClientHandler"/>.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    [EditorBrowsable(EditorBrowsableState.Advanced)]
    public OpenIddictClientSystemNetHttpBuilder ConfigureHttpClientHandler(string provider, Action<HttpClientHandler> configuration)
    {
        if (string.IsNullOrEmpty(provider))
        {
            throw new ArgumentException(SR.FormatID0366(nameof(provider)), nameof(provider));
        }

        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        return ConfigureHttpClientHandler((registration, handler) =>
        {
            if (string.Equals(registration.ProviderName, provider, StringComparison.Ordinal))
            {
                configuration(handler);
            }
        });
    }

    /// <summary>
    /// Configures the <see cref="HttpClientHandler"/> used by the OpenIddict client/System.Net.Http integration.
    /// </summary>
    /// <remarks>
    /// Note: customizations configured using this method apply to all client registrations, but the
    /// configuration delegate can restrict the applied customizations to specific instances.
    /// </remarks>
    /// <param name="configuration">The delegate used to configure the <see cref="HttpClientHandler"/>.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    [EditorBrowsable(EditorBrowsableState.Advanced)]
    public OpenIddictClientSystemNetHttpBuilder ConfigureHttpClientHandler(
        Action<OpenIddictClientRegistration, HttpClientHandler> configuration)
    {
        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        return Configure(options => options.HttpClientHandlerActions.Add(configuration));
    }

    /// <summary>
    /// Sets the contact address used in the "From" header that is attached
    /// to the backchannel HTTP requests sent to the authorization server.
    /// </summary>
    /// <param name="address">The mail address.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetContactAddress(MailAddress address)
    {
        if (address is null)
        {
            throw new ArgumentNullException(nameof(address));
        }

        return Configure(options => options.ContactAddress = address);
    }

    /// <summary>
    /// Sets the contact address used in the "From" header that is attached
    /// to the backchannel HTTP requests sent to the authorization server.
    /// </summary>
    /// <param name="address">The mail address.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetContactAddress(string address)
    {
        if (string.IsNullOrEmpty(address))
        {
            throw new ArgumentException(SR.FormatID0366(nameof(address)), nameof(address));
        }

        return SetContactAddress(new MailAddress(address));
    }

    /// <summary>
    /// Replaces the default HTTP error policy used by the OpenIddict client services.
    /// </summary>
    /// <param name="policy">The HTTP Polly error policy.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetHttpErrorPolicy(IAsyncPolicy<HttpResponseMessage> policy)
    {
        if (policy is null)
        {
            throw new ArgumentNullException(nameof(policy));
        }

        return Configure(options => options.HttpErrorPolicy = policy);
    }

#if SUPPORTS_HTTP_CLIENT_RESILIENCE
    /// <summary>
    /// Replaces the default HTTP resilience pipeline used by the OpenIddict client services.
    /// </summary>
    /// <param name="configuration">
    /// The delegate used to configure the <see cref="ResiliencePipeline{HttpResponseMessage}"/>.
    /// </param>
    /// <remarks>
    /// Note: this option has no effect when an HTTP error policy was explicitly configured
    /// using <see cref="SetHttpErrorPolicy(IAsyncPolicy{HttpResponseMessage})"/>.
    /// </remarks>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetHttpResiliencePipeline(
        Action<ResiliencePipelineBuilder<HttpResponseMessage>> configuration)
    {
        if (configuration is null)
        {
            throw new ArgumentNullException(nameof(configuration));
        }

        var builder = new ResiliencePipelineBuilder<HttpResponseMessage>();
        configuration(builder);

        return SetHttpResiliencePipeline(builder.Build());
    }

    /// <summary>
    /// Replaces the default HTTP resilience pipeline used by the OpenIddict client services.
    /// </summary>
    /// <param name="pipeline">The HTTP resilience pipeline.</param>
    /// <remarks>
    /// Note: this option has no effect when an HTTP error policy was explicitly configured
    /// using <see cref="SetHttpErrorPolicy(IAsyncPolicy{HttpResponseMessage})"/>.
    /// </remarks>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetHttpResiliencePipeline(ResiliencePipeline<HttpResponseMessage> pipeline)
    {
        if (pipeline is null)
        {
            throw new ArgumentNullException(nameof(pipeline));
        }

        return Configure(options => options.HttpResiliencePipeline = pipeline);
    }
#endif

    /// <summary>
    /// Sets the product information used in the "User-Agent" header that is attached
    /// to the backchannel HTTP requests sent to the authorization server.
    /// </summary>
    /// <param name="information">The product information.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetProductInformation(ProductInfoHeaderValue information)
    {
        if (information is null)
        {
            throw new ArgumentNullException(nameof(information));
        }

        return Configure(options => options.ProductInformation = information);
    }

    /// <summary>
    /// Sets the product information used in the "User-Agent" header that is attached
    /// to the backchannel HTTP requests sent to the authorization server.
    /// </summary>
    /// <param name="name">The product name.</param>
    /// <param name="version">The product version.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetProductInformation(string name, string? version)
    {
        if (string.IsNullOrEmpty(name))
        {
            throw new ArgumentException(SR.GetResourceString(SR.ID0345), nameof(name));
        }

        return SetProductInformation(new ProductInfoHeaderValue(name, version));
    }

    /// <summary>
    /// Sets the product information used in the user agent header that is attached
    /// to the backchannel HTTP requests sent to the authorization server based
    /// on the identity of the specified .NET assembly (name and version).
    /// </summary>
    /// <param name="assembly">The assembly from which the product information is created.</param>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetProductInformation(Assembly assembly)
    {
        if (assembly is null)
        {
            throw new ArgumentNullException(nameof(assembly));
        }

        return SetProductInformation(new ProductInfoHeaderValue(
            productName: assembly.GetName().Name!,
            productVersion: assembly.GetName().Version!.ToString()));
    }

    /// <summary>
    /// Sets the delegate called by OpenIddict when trying to resolve the self-signed
    /// TLS client authentication certificate that will be used for OAuth 2.0
    /// mTLS-based client authentication (self_signed_tls_client_auth), if applicable.
    /// </summary>
    /// <param name="selector">The selector delegate.</param>
    /// <remarks>
    /// If no value is explicitly set, OpenIddict automatically tries to resolve the
    /// X.509 certificate from the signing credentials attached to the client registration
    /// (in this case, the X.509 certificate MUST include the digital signature and
    /// client authentication key usages to be automatically selected by OpenIddict).
    /// </remarks>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetSelfSignedTlsClientAuthenticationCertificateSelector(
        Func<OpenIddictClientRegistration, X509Certificate2?> selector)
    {
        if (selector is null)
        {
            throw new ArgumentNullException(nameof(selector));
        }

        return Configure(options => options.SelfSignedTlsClientAuthenticationCertificateSelector = selector);
    }

    /// <summary>
    /// Sets the delegate called by OpenIddict when trying to resolve the
    /// TLS client authentication certificate that will be used for OAuth 2.0
    /// mTLS-based client authentication (tls_client_auth), if applicable.
    /// </summary>
    /// <param name="selector">The selector delegate.</param>
    /// <remarks>
    /// If no value is explicitly set, OpenIddict automatically tries to resolve the
    /// X.509 certificate from the signing credentials attached to the client registration
    /// (in this case, the X.509 certificate MUST include the digital signature and
    /// client authentication key usages to be automatically selected by OpenIddict).
    /// </remarks>
    /// <returns>The <see cref="OpenIddictClientSystemNetHttpBuilder"/> instance.</returns>
    public OpenIddictClientSystemNetHttpBuilder SetTlsClientAuthenticationCertificateSelector(
        Func<OpenIddictClientRegistration, X509Certificate2?> selector)
    {
        if (selector is null)
        {
            throw new ArgumentNullException(nameof(selector));
        }

        return Configure(options => options.TlsClientAuthenticationCertificateSelector = selector);
    }

    /// <inheritdoc/>
    [EditorBrowsable(EditorBrowsableState.Never)]
    public override bool Equals(object? obj) => base.Equals(obj);

    /// <inheritdoc/>
    [EditorBrowsable(EditorBrowsableState.Never)]
    public override int GetHashCode() => base.GetHashCode();

    /// <inheritdoc/>
    [EditorBrowsable(EditorBrowsableState.Never)]
    public override string? ToString() => base.ToString();
}