import {Inject, Injectable} from '@angular/core';
import { Router, CanActivate, ActivatedRouteSnapshot, RouterStateSnapshot } from '@angular/router';
import {TcCoreConfigService} from '@tibco-tcstk/tc-core-lib';
import {CredentialsService} from '../services/credentials.service';
import {TcAppDefinitionService} from '../services/tc-app-definition.service';

@Injectable()
export class AuthGuard implements CanActivate {
  private TIBCO_CLOUD_DOMAIN = 'cloud.tibco.com';
  private TIBCO_TEST_DOMAIN = 'tenant-integration.tcie.pro';
  private TIBCO_DEV_DOMAIN = 'emea.tibco.com';

  constructor(private router: Router, private coreConfigService: TcCoreConfigService, protected credentialsService: CredentialsService, protected appDefinitionService: TcAppDefinitionService) {
  }

  redirectLogin(state: RouterStateSnapshot): boolean {
    this.router.navigate(['/login'], {queryParams: {returnUrl: state.url}});
    return false;
  }

  canActivate(route: ActivatedRouteSnapshot, state: RouterStateSnapshot) {
    // check if we are hosted on tibco.cloud.com
    if (this.credentialsService.isCloud()) {
      // delegate handling login/auth to Tibco Cloud since WRP resources are protected anyway
      return true;
    }
    if (this.credentialsService.isOauth()) {
      // oauth mode
      if (this.appDefinitionService.claims) {
        return true;
      } else {
        // something wrong - invalid oauth key?
        console.warn('Auth guard| Oauth configured but no claims available in appDefinitionService');
        return this.redirectLogin(state);
      }
    }
    if (this.credentialsService.isCookies()) {
      // cookies mode
      if (this.appDefinitionService.claims) {
        return true;
      } else {
        // assume no cookies - redirect to login
        console.warn('Auth guard| cookies mode but no claims - redirecting to login');
        return this.redirectLogin(state);
      }
    }
    // fallback - refuse access
    console.warn('Auth guard| fallback - redirecting to login');
    return this.redirectLogin(state);

    /*const host = window.location.hostname.split('.');
    const hostDomain = host[host.length - 3] + '.' + host[host.length - 2] + '.' + host[host.length - 1];
    if (hostDomain === this.TIBCO_CLOUD_DOMAIN || hostDomain === this.TIBCO_TEST_DOMAIN || hostDomain === this.TIBCO_DEV_DOMAIN || (this.appDefinitionService && this.appDefinitionService.claims)) {
      // delegate handling login/auth to Tibco Cloud since WRP resources are protected anyway
      return true;
    } else if (this.coreConfigService.getConfig().oAuthLocalStorageKey && this.coreConfigService.getConfig().oAuthLocalStorageKey !== '') {
      // dont use this when oauth enabled
      if (!this.credentialsService.authorized) {
        return this.credentialsService.isAuth().then(
          ok => {
            if (ok) {
              return true;
            } else {
              this.router.navigate(['/login'], {queryParams: {returnUrl: state.url}});
              return false;
            }
          },
          error => {
            this.router.navigate(['/login'], {queryParams: {returnUrl: state.url}});
            return false;
          }
        );
      } else {
        return true;
      }
    } else {
      // use the sessionTimestamp to decide whether to redirect to login (30 mins expiry of token if no API call)
      const tcsTimestamp = sessionStorage.getItem('tcsTimestamp');
      if (tcsTimestamp && Number(tcsTimestamp) > (Number(Date.now()) - (30 * 60000))) {
        // logged in and api called made in last 30 mins so should be OK
        return true;
      } else {
        // not logged in so redirect to login page
        console.warn(Date.now());
        console.warn('Token expired - redirect to login: ', tcsTimestamp);
        this.router.navigate(['/login'], {queryParams: {returnUrl: state.url}});
      }
    }*/
  }
}