package config

import (
	"time"

	"golang.org/x/crypto/bcrypt"
)

type UserAPI struct {
	Matrix *Global `yaml:"-"`

	InternalAPI InternalAPIOptions `yaml:"internal_api"`

	// The cost when hashing passwords.
	BCryptCost int `yaml:"bcrypt_cost"`

	// The length of time an OpenID token is condidered valid in milliseconds
	OpenIDTokenLifetime time.Duration `yaml:"openid_token_lifetime"`

	// Disable TLS validation on HTTPS calls to push gatways. NOT RECOMMENDED!
	PushGatewayDisableTLSValidation bool `yaml:"push_gateway_disable_tls_validation"`

	// The Account database stores the login details and account information
	// for local users. It is accessed by the UserAPI.
	AccountDatabase DatabaseOptions `yaml:"account_database"`
}

var DefaultOpenIDTokenLifetime = time.Hour

func (c *UserAPI) Defaults(generate bool) {
	c.InternalAPI.Listen = "http://localhost:7781"
	c.InternalAPI.Connect = "http://localhost:7781"
	c.AccountDatabase.Defaults(10)
	if generate {
		c.AccountDatabase.ConnectionString = "file:userapi_accounts.db"
	}
	c.BCryptCost = bcrypt.DefaultCost
	c.OpenIDTokenLifetime = DefaultOpenIDTokenLifetime
}

func (c *UserAPI) Verify(configErrs *ConfigErrors, isMonolith bool) {
	checkURL(configErrs, "user_api.internal_api.listen", string(c.InternalAPI.Listen))
	checkURL(configErrs, "user_api.internal_api.connect", string(c.InternalAPI.Connect))
	setDatabase(c.Matrix.GlobalDatabaseOptions, &c.AccountDatabase, "userapi.db")
	checkNotEmpty(configErrs, "user_api.account_database.connection_string", string(c.AccountDatabase.ConnectionString))
	checkPositive(configErrs, "user_api.openid_token_lifetime", c.OpenIDTokenLifetime.Milliseconds())
}