openjaf/cenit

module Setup
  class Oauth2Provider < Setup::BaseOauthProvider
    include CenitUnscoped

    build_in_data_type
      .referenced_by(:namespace, :name)
      .excluding(:origin, :tenant)

    field :scope_separator, type: String

    validates_length_of :scope_separator, maximum: 1

    after_save :default_scope

    def default_scope
      Setup::Oauth2Scope.find_or_create_by(origin: origin, provider_id: id, name: '{{scope}}')
    end

    def can_cross?(origin)
      (id != self.class.build_in_provider_id || origin.to_sym == :cenit) && super
    end

    class << self

      def build_in_provider_id
        unless @build_in_provider_id
          basic_attrs = {
            namespace: 'Cenit',
            name: 'OAuth',
            origin: :cenit
          }
          oauth_provider = Setup::Oauth2Provider.where(basic_attrs).first ||
            Setup::Oauth2Provider.new(basic_attrs)
          @build_in_provider_id = oauth_provider.id
          oauth_provider.authorization_endpoint = "#{Cenit.homepage}#{Cenit.oauth_path}/authorize"
          oauth_provider.token_endpoint =
            if Cenit.oauth_token_end_point.to_s.to_sym == :embedded
              "#{Cenit.homepage}#{Cenit.oauth_path}/token"
            else
              Cenit.oauth_token_end_point
            end
          oauth_provider.response_type = :code
          oauth_provider.token_method = :POST
          oauth_provider.refresh_token_strategy = :default
          if oauth_provider.changed?
            Setup::SystemReport.create_with(
              message: 'Cenit OAuth 2.0 provider configuration changed',
              type: :warning,
              attachment: {
                filename: 'changes.json',
                contentType: 'application/json',
                body: JSON.pretty_generate(oauth_provider.changes)
              }
            )
            oauth_provider.save!
          end
          scopes = Cenit::OauthScope::NON_ACCESS_TOKENS +
            Cenit::OauthScope::ACCESS_TOKENS.collect { |method| "#{method} {{#{method}}}" } +
            ['{{scope}}']
          scopes.each do |scope_name|
            Setup::Oauth2Scope.find_or_create_by!(
              provider: oauth_provider,
              name: scope_name,
              origin: :cenit
            )
          end
        end
        @build_in_provider_id
      end
    end
  end
end