<?php

/*
 * This file is part of the Maestro Project.
 * Copyright (C) Compos Juliot
 */

namespace App\Application\Security;

use App\Application\Exception\SubException\ForbiddenMaestroException;
use App\Application\Exception\SubException\InternalServerErrorMaestroException;
use App\Application\Exception\SubException\UnhautorizedMaestroException;
use App\Application\Exception\SubException\UnprocessableEntityMaestroException;
use App\Domain\Entity\UserProject;
use Namshi\JOSE\SimpleJWS;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;

class AclVoter extends Voter
{
    const ACL = [
        'MAESTRO_MODULE_PROJECT_MODULE',
        'MAESTRO_PROJECT_PROJECTS_LIST',
        'MAESTRO_PROJECT_PROJECTS_READ',
        'MAESTRO_PROJECT_PROJECTS_CREATE',
        'MAESTRO_PROJECT_PROJECTS_UPDATE',
        'MAESTRO_PROJECT_PROJECTS_DELETE',
        // 'MAESTRO_PROJECT_PROJECTS_GROUP',
        // 'MAESTRO_PROJECT_EXPORT_LIST',
        // 'MAESTRO_PROJECT_EXPORT_READ',
        // 'SYSPAD_CDF_WORKFLOW_UPDATE',
        // 'SYSPAD_CDF_WORKFLOW_LIST',
        // 'MAESTRO_PROJECT_WORKFLOW_UPDATE',
        // 'MAESTRO_PROJECT_WORKFLOW_LIST',
        // 'MAESTRO_PROJECT_MEDIA_CREATE',
        // 'MAESTRO_PROJECT_MEDIA_DELETE',
        // 'MAESTRO_PROJECT_MEDIA_READ',
        // 'MAESTRO_PROJECT_MEDIA_LIST',
        // 'SYSPAD_CDF_CDF_CREATE',
        // 'SYSPAD_CDF_CDF_UPDATE',
        // 'SYSPAD_CDF_CDF_READ',
        // 'SYSPAD_CDF_CDF_LIST',
        // 'SYSPAD_CDF_CDF_DELETE',
        // 'SYSPAD_CDF_PAGE_CREATE',
        // 'SYSPAD_CDF_PAGE_READ',
        // 'SYSPAD_CDF_PAGE_DELETE',
        // 'SYSPAD_CDF_PAGE_UPDATE',
        // 'SYSPAD_CDF_PAGE_LIST',
        // 'SYSPAD_CDF_PAGE_EDIT',
        'MAESTRO_PROJECT_TEMPLATE_LIST',
        'MAESTRO_PROJECT_TEMPLATE_READ',
        'MAESTRO_PROJECT_TEMPLATE_CREATE',
        'MAESTRO_PROJECT_TEMPLATE_UPDATE',
        'MAESTRO_PROJECT_TEMPLATE_DELETE'
    ];

    protected function supports($attribute, $subject): bool
    {
        if (!in_array($attribute, self::ACL)) {
            throw new InternalServerErrorMaestroException('Unknow ACL !', 'acl', 'supports');
        }

        if ('string' !== gettype($subject)) {
            throw new UnprocessableEntityMaestroException('Unhandled suject !', 'acl', 'supports');
        }

        return true;
    }

    protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
    {
        $user = $token->getUser();

        if (!$user instanceof UserProject) {
            throw new UnhautorizedMaestroException('User not logged in !', 'user', 'voteOnAttribute');
        }

        $jws = SimpleJWS::load($subject);
        $payload = $jws->getPayload();

        if (!isset($payload['acl'])) {
            throw new UnprocessableEntityMaestroException('ACL not found !', 'acl', 'voteOnAttribute');
        }

        $acl = $payload['acl'];

        if (!isset($acl[$attribute]) || 1 !== (int) $acl[$attribute]) {
            throw new ForbiddenMaestroException('project', 'acl', 'voteOnAttribute');
        }

        return true;
    }
}