#include "PageRequestHandlerFactory.h"

#include "Poco/Net/HTTPServerRequest.h"
#include "Poco/Net/HTMLForm.h"
#include "Poco/DateTime.h"
#include "Poco/DateTimeFormatter.h"

#include "ConfigPage.h"
#include "LoginPage.h"
#include "RegisterPage.h"
#include "HandleFileRequest.h"
#include "DashboardPage.h"
#include "CheckEmailPage.h"
#include "PassphrasePage.h"
#include "SaveKeysPage.h"
#include "ElopageWebhook.h"
#include "ElopageWebhookLight.h"
#include "UpdateUserPasswordPage.h"
#include "Error500Page.h"
#include "CheckTransactionPage.h"
#include "ResetPassword.h"
#include "RegisterAdminPage.h"
#include "DebugPassphrasePage.h"
#include "AdminCheckUserBackup.h"
#include "TranslatePassphrase.h"

#include "DecodeTransactionPage.h"


#include "../SingletonManager/SessionManager.h"

#include "../lib/Profiler.h"

#include "../ServerConfig.h"
#include "../Crypto/DRRandom.h"

PageRequestHandlerFactory::PageRequestHandlerFactory()
	: mRemoveGETParameters("^/([a-zA-Z0-9_-]*)"), mLogging(Poco::Logger::get("requestLog"))
{
	ServerConfig::g_ServerKeySeed->put(8, DRRandom::r64());
}

Poco::Net::HTTPRequestHandler* PageRequestHandlerFactory::createRequestHandler(const Poco::Net::HTTPServerRequest& request)
{
	//printf("request uri: %s\n", request.getURI().data());
	Profiler timeUsed;
	std::string uri = request.getURI();
	std::string url_first_part;
	std::string dateTimeString = Poco::DateTimeFormatter::format(Poco::DateTime(), "%d.%m.%y %H:%M:%S");
	mRemoveGETParameters.extract(uri, url_first_part);

	std::string externReferer;

	if (uri != "/favicon.ico") {
		//printf("[PageRequestHandlerFactory] uri: %s, first part: %s\n", uri.data(), url_first_part.data());
		auto referer = request.find("Referer");
		if (referer != request.end()) {
			//printf("referer: %s\n", referer->second.data());
			auto refererString = referer->second;
			if (refererString.find(ServerConfig::g_serverPath) == refererString.npos) {
				externReferer = refererString;
			}
		}//*/
	}

	if (url_first_part == "/elopage_webhook_261") {
		mLogging.information(dateTimeString + " call from elopage");
		//printf("call from elopage\n");
		auto pageRequestHandler = new ElopageWebhook;
		pageRequestHandler->setProfiler(timeUsed);
		return pageRequestHandler;
	}

	if (url_first_part == "/elopage_webhook_211") {
		mLogging.information(dateTimeString + " call from elopage light");
		auto pageRequestHandler = new ElopageWebhookLight;
		pageRequestHandler->setProfiler(timeUsed);
		return pageRequestHandler;
	}

	// check if user has valid session
	Poco::Net::NameValueCollection cookies;
	request.getCookies(cookies);

	int session_id = 0;

	try {
		session_id = atoi(cookies.get("GRADIDO_LOGIN").data());
	} catch (...) {}

	auto sm = SessionManager::getInstance();
	auto s = sm->getSession(session_id);

	// for debugging
	std::stringstream logStream;
	auto referer = request.find("Referer");
	logStream << dateTimeString  << " call " << uri;
	if (s) {logStream << ", with session: " << std::to_string(s->getHandle()); }
	if (referer != request.end()) { logStream << ", from: " << referer->second;}
	mLogging.information(logStream.str());
	// end debugging

	// TODO: count invalid session requests from IP and block IP for some time to prevent brute force session hijacking
	// or use log file and configure fail2ban for this to do
	
	if (url_first_part == "/checkEmail") {
		//return new CheckEmailPage(s);
		if (!s || s->getSessionState() < SESSION_STATE_EMAIL_VERIFICATION_CODE_CHECKED) {
			return handleCheckEmail(s, uri, request, timeUsed);
		}
	}
	if (url_first_part == "/register") {
		auto pageRequestHandler = new RegisterPage;
		pageRequestHandler->setProfiler(timeUsed);
		return pageRequestHandler;
	}
	if (url_first_part == "/resetPassword") {
		auto resetPassword = new ResetPassword;
		resetPassword->setProfiler(timeUsed);
		return resetPassword;
	}

	if (url_first_part == "/decode_transaction") {
		mLogging.information(dateTimeString + " decode");
		auto pageRequestHandler = new DecodeTransactionPage(s);
		pageRequestHandler->setProfiler(timeUsed);
		return pageRequestHandler;
	}
	if (s) {
		if (externReferer != "") {
			s->setLastReferer(externReferer);
		}
		auto user = s->getUser();
		if (s->errorCount() || (!user.isNull() && user->errorCount())) {
			if (!user.isNull() && user->errorCount()) {
				s->getErrors(user);
			}
			s->sendErrorsAsEmail();
			auto pageRequestHandler = new Error500Page(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		if (url_first_part == "/error500") {
			auto pageRequestHandler = new Error500Page(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		if (url_first_part == "/transform_passphrase") {
			auto pageRequestHandler = new TranslatePassphrase(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		if (s->getNewUser()->getModel()->getRole() == model::table::ROLE_ADMIN) {
			if (url_first_part == "/adminRegister") {
				auto pageRequestHandler = new RegisterAdminPage(s);
				pageRequestHandler->setProfiler(timeUsed);
				return pageRequestHandler;
			}
			if (url_first_part == "/debugPassphrase") {
				auto pageRequestHandler = new DebugPassphrasePage(s);
				pageRequestHandler->setProfiler(timeUsed);
				return pageRequestHandler;
			}
			if (url_first_part == "/checkUserBackups") {
				auto pageRequestHandler = new AdminCheckUserBackup(s);
				pageRequestHandler->setProfiler(timeUsed);
				return pageRequestHandler;
			}
		}

		if(url_first_part == "/logout") {
			sm->releaseSession(s);
			// remove cookie(s)
			
			//printf("session released\n");
			auto pageRequestHandler = new LoginPage(nullptr);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		if(url_first_part == "/user_delete") {
			if(s->deleteUser()) {
				sm->releaseSession(s);
				auto pageRequestHandler = new LoginPage(nullptr);
				pageRequestHandler->setProfiler(timeUsed);
				return pageRequestHandler;
			}			
		}
		auto sessionState = s->getSessionState();
		printf("session state: %s\n", s->getSessionStateString());
		if (url_first_part == "/updateUserPassword" && sessionState == SESSION_STATE_RESET_PASSWORD_REQUEST) {
			auto pageRequestHandler = new UpdateUserPasswordPage(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		//printf("session state: %s\n", s->getSessionStateString());
		if(sessionState == SESSION_STATE_EMAIL_VERIFICATION_CODE_CHECKED || 
		   sessionState == SESSION_STATE_PASSPHRASE_GENERATED ||
		   sessionState == SESSION_STATE_RESET_PASSWORD_REQUEST) {
		//if (url_first_part == "/passphrase") {
			//return handlePassphrase(s, request);
			auto pageRequestHandler = new PassphrasePage(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		else if(sessionState == SESSION_STATE_PASSPHRASE_SHOWN) {
		//else if (uri == "/saveKeys") {
			auto pageRequestHandler = new SaveKeysPage(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		else if (sessionState == SESSION_STATE_RESET_PASSWORD_REQUEST) {
			// 
			auto pageRequestHandler = new UpdateUserPasswordPage(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		if (url_first_part == "/checkTransactions") {
			auto pageRequestHandler = new CheckTransactionPage(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;

		}
		if (s && !user.isNull() && user->hasCryptoKey()) {
			//printf("[PageRequestHandlerFactory] go to dashboard page with user\n");
			auto pageRequestHandler = new DashboardPage(s);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		
	} else {

		if (url_first_part == "/config") {
			return new ConfigPage;
		}
		else if (url_first_part == "/login") {
			auto pageRequestHandler = new LoginPage(nullptr);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
	}
	auto pageRequestHandler = new LoginPage(nullptr);
	pageRequestHandler->setProfiler(timeUsed);
	return pageRequestHandler;
	//return new HandleFileRequest;
	//return new PageRequestHandlerFactory;
}

Poco::Net::HTTPRequestHandler* PageRequestHandlerFactory::handleCheckEmail(Session* session, const std::string uri, const Poco::Net::HTTPServerRequest& request, Profiler timeUsed)
{
	Poco::Net::HTMLForm form(request);
	unsigned long long verificationCode = 0;
	Languages lang = LANG_DE;

	// if verification code is valid, go to next page, passphrase
	// login via verification code, if no session is active
	// try to get code from form get parameter
	if (!form.empty()) {
		try {
			verificationCode = stoull(form.get("email-verification-code", "0"));
		} catch (...) {}
		lang = LanguageManager::languageFromString(form.get("lang-btn", "de"));
	}
	// try to get code from uri parameter
	if (!verificationCode) {
		size_t pos = uri.find_last_of("/");
		try {
			auto str = uri.substr(pos + 1);
			verificationCode = stoull(uri.substr(pos + 1));
		} catch (const std::invalid_argument& ia) {
			std::cerr << __FUNCTION__ << " Invalid argument: " << ia.what() << ", str: " << uri.substr(pos + 1) << '\n';
		} catch (const std::out_of_range& oor) {
			std::cerr << __FUNCTION__ << " Out of Range error: " << oor.what() << '\n';
		}
		catch (const std::logic_error & ler) {
			std::cerr << __FUNCTION__ << " Logical error: " << ler.what() << '\n';
		}
		catch (...) {
			std::cerr << __FUNCTION__ << " Unknown error" << '\n';
		}
	}

	// if no verification code given or error with given code, show form
	if (!verificationCode) {
		auto pageRequestHandler = new CheckEmailPage(session);
		pageRequestHandler->setProfiler(timeUsed);
		return pageRequestHandler;
	}

	// we have a verification code, now let's check that thing
	auto sm = SessionManager::getInstance();

	// no session or active session don't belong to verification code
	if (!session || session->getEmailVerificationCode() != verificationCode) {
		//sm->releaseSession(session);
		//session = nullptr;
		// it is maybe unsafe
		session = sm->findByEmailVerificationCode(verificationCode);
	}
	// no suitable session in memory, try to create one from db data
	if (!session) {
		session = sm->getNewSession();
		session->setLanguage(lang);
		if (session->loadFromEmailVerificationCode(verificationCode)) {
			// login not possible in this function, forwarded to PassphrasePage
			/*auto cookie_id = session->getHandle();
			auto user_host = request.clientAddress().host();
			session->setClientIp(user_host);
			response.addCookie(Poco::Net::HTTPCookie("user", std::to_string(cookie_id)));
			*/
		}
		else {	
			//sm->releaseSession(session);
			auto pageRequestHandler = new CheckEmailPage(session);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
	}
	// suitable session found or created
	if (session) {
		auto user_host = request.clientAddress().host();
		session->setClientIp(user_host);

		if (session->getUser()->isEmptyPassword()) {
			// user has no password, maybe account created from elopage webhook
			auto pageRequestHandler = new UpdateUserPasswordPage(session);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
		}
		/*
		//! \return 1 = konto already exist
		//!        -1 = invalid code
		//!        -2 = critical error
		//!         0 = ok
		*/
		// update session, mark as verified 
		int retUpdateEmailVerification = session->updateEmailVerification(verificationCode);

		if (0 == retUpdateEmailVerification) {
			//printf("[PageRequestHandlerFactory::handleCheckEmail] timeUsed: %s\n", timeUsed.string().data());
			
			auto pageRequestHandler = new PassphrasePage(session);
			pageRequestHandler->setProfiler(timeUsed);
			return pageRequestHandler;
			
		}
		else if (1 == retUpdateEmailVerification) {
			auto user = session->getUser();
			LoginPage* loginPage = new LoginPage(session);
			loginPage->setProfiler(timeUsed);
			return loginPage;
		}
		else if (-1 == retUpdateEmailVerification) {
			auto checkEmail = new CheckEmailPage(session);
			checkEmail->setProfiler(timeUsed);
			checkEmail->getErrors(session);
			sm->releaseSession(session);
			return checkEmail;
		}
		else if (-2 == retUpdateEmailVerification) {
			auto errorPage = new Error500Page(session);
			errorPage->setProfiler(timeUsed);
			return errorPage;
		}
		
	}
	if (session) {
		sm->releaseSession(session);
	}

	auto pageRequestHandler = new CheckEmailPage(nullptr);
	pageRequestHandler->setProfiler(timeUsed);
	return pageRequestHandler;
}