package jwt

import (
	"context"
	"github.com/go-kratos/kratos/v2/log"
	"github.com/go-kratos/kratos/v2/middleware"
	"github.com/go-saas/kit/pkg/authn"
)

func ServerExtractAndAuth(tokenizer Tokenizer, logger log.Logger) middleware.Middleware {
	return middleware.Chain(ServerExtract(tokenizer, logger), ServerAuth(logger))
}

func ServerAuth(logger log.Logger) middleware.Middleware {
	l := log.NewHelper(log.With(logger, "module", "jwt.ServerAuth"))
	return func(handler middleware.Handler) middleware.Handler {
		return func(ctx context.Context, req interface{}) (interface{}, error) {
			if claims, ok := FromClaimsContext(ctx); !ok {
				//no jwt
				return handler(ctx, req)
			} else {
				//extract user and set user id context
				uid := ""
				if claims.Subject != "" {
					uid = claims.Subject
				} else {
					uid = claims.Uid
				}
				l.Debugf("resolve claims user: %s", uid)
				uc := authn.NewUserContext(ctx, authn.NewUserInfo(uid))
				// set client id context
				clientId := claims.ClientId
				if clientId != "" {
					uc = authn.NewClientContext(uc, clientId)
					l.Debugf("resolve claims client: %s", clientId)
				}
				return handler(uc, req)
			}
		}
	}
}