integreat-io/integreat

import { ensureArray } from '../utils/array.js'
import type { AccessDef, Access } from './types.js'

const allowedOrNone = (method: string) =>
  method === undefined || ['all', 'auth'].includes(method) ? method : 'none'

const massageAccessObject = ({
  actions,
  allow,
  role,
  ident,
  ...accessObject
}: AccessDef) => ({
  ...accessObject,
  ...(allow ? { allow: allowedOrNone(allow) } : {}),
  ...(ident ? { ident: ensureArray(ident) } : {}),
  ...(role ? { role: ensureArray(role) } : {}),
})

function getActionPrefix(action: string) {
  const index = action.indexOf('_')
  return index >= 0 ? action.slice(0, index) : action
}

function ensureAccessObject(access?: string | AccessDef | null) {
  if (typeof access === 'string') {
    return massageAccessObject({ allow: access })
  }
  if (typeof access === 'object' && access !== null) {
    return Object.keys(access).length > 0 ? massageAccessObject(access) : {}
  }
  return access === undefined ? {} : { allow: 'none' }
}

const getActionAccess = (access?: AccessDef | null, actionType?: string) =>
  typeof access?.actions === 'object' &&
  access?.actions != null &&
  typeof actionType === 'string'
    ? access.actions[getActionPrefix(actionType)] || access
    : access

export default function accessForAction(
  access?: AccessDef | null,
  actionType?: string,
): Access {
  return ensureAccessObject(getActionAccess(access, actionType))
}