using HyperBooru.Server.Components;
using HyperBooru.Services;
using Microsoft.AspNetCore.Authentication.JwtBearer;
using Microsoft.AspNetCore.DataProtection;
using Microsoft.AspNetCore.Http.Json;
using Microsoft.EntityFrameworkCore;
using Microsoft.IdentityModel.Tokens;
using System.Security.Cryptography;
using System.Text.Json.Serialization;

namespace HyperBooru.Server;

public class Program {
    public static void Main(string[] args) {
        var builder = WebApplication.CreateBuilder(args);

        builder.Services.AddHttpContextAccessor();
        builder.Services.AddControllers().AddJsonOptions(o => {
            var converter = new JsonStringEnumConverter();
            o.JsonSerializerOptions.Converters.Add(converter);
        });
        builder.Services.Configure<JsonOptions>(o => {
            o.SerializerOptions.TypeInfoResolverChain.Insert(0, new ExceptionJsonResolver());
        });
        builder.Services.AddRazorComponents()
            .AddInteractiveWebAssemblyComponents();

        // Add our custom services
        builder.Services.AddSingleton<IConfigService, ConfigService>();
        builder.Services.AddDbContextFactory<HBContext>();
        builder.Services.AddScoped<IFeedService, FeedService>();
        builder.Services.AddScoped<ITagService, TagService>();
        builder.Services.AddScoped<IMediaService, MediaService>();
        builder.Services.AddSingleton<IGlobalUserService, GlobalUserService>();
        builder.Services.AddScoped<IUserService, UserService>();
        builder.Services.AddHostedService<OcrService>();

        // Ensure session keys are stored in a persistent location on all platforms
        builder.Services.AddDataProtection()
            .PersistKeysToFileSystem(new(
                builder.Services.BuildServiceProvider()
                    .GetRequiredService<IConfigService>()
                    .KeyPath));

        // Load our persistently-stored JWT signing key
        builder.Services.AddSingleton<RSA>(sp => {
            var keyPath = Path.Combine(
                sp.GetRequiredService<IConfigService>().KeyPath,
                "jwt_key");

            var protector = sp.GetRequiredService<IDataProtectionProvider>()
                .CreateProtector("jwt-signing-key");

            try {
                var unprotected = protector.Unprotect(File.ReadAllBytes(keyPath));
                var rsa = RSA.Create();
                rsa.ImportRSAPrivateKey(unprotected, out var _);
                return rsa;
            } catch {
                var rsa = RSA.Create(4096);
                var privKey = rsa.ExportRSAPrivateKey();
                File.WriteAllBytes(keyPath, protector.Protect(privKey));
                return rsa;
            }
        });

        // Configure JWT token-based authentication
        builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
            .AddJwtBearer(o => {
                var rsa = builder.Services.BuildServiceProvider().GetRequiredService<RSA>();
                o.TokenValidationParameters  = new TokenValidationParameters {
                    ValidateIssuer           = false,
                    ValidateAudience         = false,
                    ValidateIssuerSigningKey = true,
                    IssuerSigningKey         = new RsaSecurityKey(rsa)
                };
            });

        // Configure custom authorization policies
        builder.Services.AddAuthorization(o => {
            o.AddPolicy(AuthorizationPolicy.NsfwPolicy, p => {
                p.RequireClaim("nsfw", "true");
            });
        });

        var app = builder.Build();

        // Ensure database is created and it's schema is up to date
        using var scope = app.Services.CreateScope();
        using var db    = scope.ServiceProvider.GetRequiredService<HBContext>();
        db.Database.Migrate();

        if(app.Environment.IsDevelopment()) {
            app.UseWebAssemblyDebugging();
        } else {
            app.UseExceptionHandler("/Error");
        }

        app.UseAuthentication();
        app.UseAuthorization();
        app.UseStatusCodePagesWithReExecute("/not-found", createScopeForStatusCodePages: true);
        app.UseHsts();
        app.UseHttpsRedirection();
        app.MapStaticAssets();
        app.UseMiddleware<ExceptionMiddleware>();
        app.UseAntiforgery();
        app.MapControllers().DisableAntiforgery();
        app.MapRazorComponents<App>()
            .AddInteractiveWebAssemblyRenderMode()
            .AddAdditionalAssemblies(typeof(Client._Imports).Assembly);

        app.Run();
    }
}