import { ApiExtraModels, ApiProperty, getSchemaPath } from "@nestjs/swagger";
import { createZodDto } from "nestjs-zod";
import { z } from "zod";

/**
 * Configuration for API key authentication in webhooks.
 */
const ApiKeyConfigSchema = z
    .object({
        headerName: z.string(),
        value: z.string(),
    })
    .strict();

export class ApiKeyConfig extends createZodDto(ApiKeyConfigSchema) {
    /**
     * The name of the header where the API key will be sent.
     */
    headerName!: string;
    /**
     * The value of the API key to be sent in the header.
     */
    value!: string;
}

/**
 * Enum for the type of authentication used in webhooks.
 */
export enum AuthConfig {
    API_KEY = "apiKey",
    NONE = "none",
}

/**
 * Configuration for webhook authentication.
 */
const WebHookAuthConfigHeaderSchema = z
    .object({
        type: z.literal(AuthConfig.API_KEY),
        config: ApiKeyConfigSchema,
    })
    .strict();

export class WebHookAuthConfigHeader extends createZodDto(
    WebHookAuthConfigHeaderSchema,
) {
    /**
     * The type of authentication used for the webhook.
     */
    type!: AuthConfig.API_KEY;
    /**
     * Configuration for API key authentication.
     * This is required if the type is 'apiKey'.
     */
    config!: ApiKeyConfig;
}

const WebHookAuthConfigNoneSchema = z
    .object({
        type: z.literal(AuthConfig.NONE),
    })
    .strict();

export class WebHookAuthConfigNone extends createZodDto(
    WebHookAuthConfigNoneSchema,
) {
    /**
     * The type of authentication used for the webhook.
     */
    type!: AuthConfig.NONE;
}

export const WebHookAuthConfigSchema = z.discriminatedUnion("type", [
    WebHookAuthConfigNoneSchema,
    WebHookAuthConfigHeaderSchema,
]);

export const WebhookConfigSchema = z
    .object({
        url: z.string(),
        auth: WebHookAuthConfigSchema,
        includeRawTokensFor: z.array(z.string()).optional(),
    })
    .strict();

/**
 * Configuration for webhooks used in various services.
 */
@ApiExtraModels(WebHookAuthConfigNone, WebHookAuthConfigHeader)
export class WebhookConfig extends createZodDto(WebhookConfigSchema) {
    /**
     * The URL to which the webhook will send notifications.
     */
    url!: string;
    /**
     * Optional authentication configuration for the webhook.
     * If not provided, no authentication will be used.
     */
    @ApiProperty({
        oneOf: [
            { $ref: getSchemaPath(WebHookAuthConfigNone) },
            { $ref: getSchemaPath(WebHookAuthConfigHeader) },
        ],
    })
    auth!: z.infer<typeof WebHookAuthConfigSchema>;

    /**
     * Optional array of credential configuration IDs.
     * If provided, the webhook payload will include the raw cryptographic
     * presentation (e.g., vp_token) for these specific credentials.
     */
    @ApiProperty({
        required: false,
        type: [String],
        description:
            "List of credential IDs to include raw tokens for (e.g., ['sca_credential'])",
    })
    includeRawTokensFor?: string[];
}