18F/identity-idp

# frozen_string_literal: true

class ServiceProviderRequestHandler
  def initialize(url:, session:, protocol_request:, protocol:)
    @url = url
    @session = session
    @protocol_request = protocol_request
    @protocol = protocol.new(protocol_request)
  end

  def call
    return if sp_url_stored_in_session == url

    pull_request_id_from_current_sp_session_id

    delete_sp_request_if_session_has_matching_request_id

    service_provider_request = ServiceProviderRequestProxy.create!(attributes)

    StoreSpMetadataInSession.new(session: session, request_id: request_id).call(
      service_provider_request: service_provider_request,
      requested_service_provider: protocol.service_provider,
    )
  end

  private

  attr_reader :url, :session, :protocol_request, :protocol

  def ial
    Saml::Idp::Constants::IAL2_AUTHN_CONTEXTS.include?(protocol.ial) ? 2 : 1
  end

  def current_sp
    protocol.issuer
  end

  def sp_stored_in_session
    service_provider_request_proxy&.issuer
  end

  def sp_url_stored_in_session
    service_provider_request_proxy&.url
  end

  def service_provider_request_proxy
    return if sp_request_id.blank?
    return @service_provider_request_proxy if defined?(@service_provider_request_proxy)
    @service_provider_request_proxy = ServiceProviderRequestProxy.from_uuid(sp_request_id)
  end

  def pull_request_id_from_current_sp_session_id
    @request_id = sp_session[:request_id] if current_sp == sp_stored_in_session
  end

  def delete_sp_request_if_session_has_matching_request_id
    return if sp_request_id.blank?
    ServiceProviderRequestProxy.delete(sp_session[:request_id])
  end

  def attributes
    {
      issuer: protocol.issuer,
      acr_values: protocol.acr_values,
      vtr: protocol.vtr,
      requested_attributes: protocol.requested_attributes,
      uuid: request_id,
      url: url,
    }
  end

  def request_id
    @request_id ||= SecureRandom.uuid
  end

  def sp_request_id
    sp_session[:request_id]
  end

  def sp_session
    session.fetch(:sp, {})
  end
end