JoshuaMart/ScopesExtractor

# frozen_string_literal: true

module ScopesExtractor
  module Intigriti
    # Intigrit Sync Scopes
    module Scopes
      CATEGORIES = {
        url: [1, 7],
        mobile: [2, 3],
        cidr: [4],
        device: [5],
        other: [6]
      }.freeze

      PROGRAMS_ENDPOINT = 'https://api.intigriti.com/external/researcher/v1/programs'

      def self.sync(program, headers)
        scopes = {}

        url = File.join(PROGRAMS_ENDPOINT, program[:id])
        response = HttpClient.get(url, { headers: headers })
        return scopes unless response&.status == 200

        json = Parser.json_parse(response.body)
        return scopes unless json

        content = json.dig('domains', 'content')
        return scopes unless content

        parse_scopes(content)
      end

      def self.parse_scopes(scopes)
        categorized_scopes = { 'in' => {}, 'out' => {} }
        return categorized_scopes unless scopes.is_a?(Array)

        scopes.each do |scope|
          category = find_category(scope)
          next unless category

          type = scope.dig('tier', 'value') == 'Out Of Scope' ? 'out' : 'in'
          
          categorized_scopes[type][category] ||= []
          endpoint = case scope.dig('type', 'id')
                     when 1, 7
                        normalize(scope['endpoint'])
                     else
                        scope['endpoint'].downcase
                     end
          next unless endpoint

          categorized_scopes[type][category] << endpoint
        end

        categorized_scopes
      end

      def self.find_category(scope)
        category = CATEGORIES.find { |_key, values| values.include?(scope.dig('type', 'id')) }&.first
        Utilities.log_warn("Intigriti - Inexistent categories : #{scope}") if category.nil?

        category
      end

      def self.normalize(endpoint)
        endpoint = sanitize_endpoint(endpoint)

        if endpoint.match?(%r{^(https?://|\*\.)[/\w.\-?#!%:=]+$}i) || endpoint.match?(%r{^[/\w.-]+\.[a-z]+(/.*)?}i)
          endpoint.downcase
        else
          Utilities.log_warn("Intigriti - Non-normalized endpoint : #{endpoint}")
          nil
        end
      end

      def self.sanitize_endpoint(endpoint)
        endpoint.gsub('/*', '').gsub(' ', '').sub('.*', '.com').sub('.<TLD>', '.com')
                .sub(%r{/$}, '').sub(/\*$/, '').sub(/,$/, '')
      end
    end
  end
end