18F/identity-idp

# frozen_string_literal: true

class WebauthnConfiguration < ApplicationRecord
  belongs_to :user
  validates :name, presence: true
  validates :credential_id, presence: true
  validates :credential_public_key, presence: true
  validate :valid_transports

  # https://w3c.github.io/webauthn/#enum-transport
  VALID_TRANSPORTS = %w[
    usb
    nfc
    ble
    smart-card
    hybrid
    internal
  ].to_set.freeze

  def self.roaming_authenticators
    self.where(platform_authenticator: [nil, false])
  end

  def self.platform_authenticators
    self.where(platform_authenticator: true)
  end

  def mfa_enabled?
    true
  end

  def selection_presenters
    if platform_authenticator?
      [TwoFactorAuthentication::SignInWebauthnPlatformSelectionPresenter.
        new(user:, configuration: self)]
    else
      [TwoFactorAuthentication::SignInWebauthnSelectionPresenter.new(user:, configuration: self)]
    end
  end

  def friendly_name
    if platform_authenticator?
      :webauthn_platform
    else
      :webauthn
    end
  end

  def self.selection_presenters(set)
    if set.any?
      set.map(&:selection_presenters).flatten.uniq(&:class)
    else
      []
    end
  end

  private

  def valid_transports
    return if transports.blank? || (transports - VALID_TRANSPORTS.to_a).blank?
    errors.add(:transports, I18n.t('errors.general'), type: :invalid_transports)
  end
end