<?php
/**
 * A service class for generic OAuth2 providers added for Dolibarr project to manage generic use cases.
 */
namespace OAuth\OAuth2\Service;

use OAuth\OAuth2\Token\StdOAuth2Token;
use OAuth\Common\Http\Exception\TokenResponseException;
use OAuth\Common\Http\Uri\Uri;
use OAuth\Common\Consumer\CredentialsInterface;
use OAuth\Common\Http\Uri\UriInterface;
use OAuth\Common\Storage\TokenStorageInterface;
use OAuth\Common\Http\Client\ClientInterface;

class Generic extends AbstractService
{
	/**
	 * Defined scopes
	 */
	const SCOPE_READ = 'read';
	const SCOPE_WRITE = 'write';
	const SCOPE_FOLLOW = 'follow';
	const SCOPE_PUSH = 'push';

	const SCOPE_ADMIN_READ = 'admin:read';
	const SCOPE_ADMIN_WRITE = 'admin:write';


    public function __construct(
        CredentialsInterface $credentials,
        ClientInterface $httpClient,
        TokenStorageInterface $storage,
        $scopes = array(),
        UriInterface $baseApiUri = null
    ) {
        parent::__construct($credentials, $httpClient, $storage, $scopes, $baseApiUri);
        if ($baseApiUri === null) {
        	$url = getDolGlobalString('OAUTH_GENERIC-'.$storage->getKeyForProvider().'_URL');
        	//$url = 'https://aaaaa.com';
        	if (!empty($url)) {
				$this->baseApiUri = new Uri($url);
        	}
        }
    }

    /**
     * Return the private property $this->baseApiUri
     */
    public function getBaseApiUri()
    {
    	return $this->baseApiUri;
    }

    /**
     * {@inheritdoc}
     */
    public function getRequestTokenEndpoint()
    {
    	$urltouse = (preg_match('/oauth2?\/?$/', $this->baseApiUri) ? $this->baseApiUri : $this->baseApiUri.'/oauth').'/request';

    	return new Uri($urltouse);
    }

    /**
     * {@inheritdoc}
     */
    public function getAuthorizationEndpoint()
    {
    	$urltouse = (preg_match('/oauth2?\/?$/', $this->baseApiUri) ? $this->baseApiUri : $this->baseApiUri.'/oauth').'/authorize';
    	return new Uri($urltouse);
    }

    /**
     * {@inheritdoc}
     */
    public function getAccessTokenEndpoint()
    {
    	$urltouse = (preg_match('/oauth2?\/?$/', $this->baseApiUri) ? $this->baseApiUri : $this->baseApiUri.'/oauth').'/token';

    	return new Uri($urltouse);
    }

    /**
     * {@inheritdoc}
     */
    public function getAuthorizationUri(array $additionalParameters = array())
    {
        $parameters = array_merge(
            $additionalParameters,
            array(
                'redirect_uri' => $this->credentials->getCallbackUrl(),
            )
        );

        // Build the url
        $url = clone $this->getAuthorizationEndpoint();
        foreach ($parameters as $key => $val) {
            $url->addToQuery($key, $val);
        }

        return $url;
    }

    /**
     * {@inheritdoc}
     */
    public function requestRequestToken()
    {
        $responseBody = $this->httpClient->retrieveResponse(
            $this->getRequestTokenEndpoint(),
            array(
                'consumer_key' => $this->credentials->getConsumerId(),
                'redirect_uri' => $this->credentials->getCallbackUrl(),
            )
        );

        $code = $this->parseRequestTokenResponse($responseBody);

        return $code;
    }

    /**
     * {@inheritdoc}
     */
    protected function parseRequestTokenResponse($responseBody)
    {
    	$data = array();

        parse_str($responseBody, $data);

        if (null === $data || !is_array($data)) {
            throw new TokenResponseException('Unable to parse response.');
        } elseif (!isset($data['code'])) {
            throw new TokenResponseException('Error in retrieving code.');
        }
        return $data['code'];
    }

    /**
     * {@inheritdoc}
     */
    public function requestAccessToken($code, $state = null)
    {
        $bodyParams = array(
        	'client_id'     => $this->credentials->getConsumerId(),
        	'client_secret' => $this->credentials->getConsumerSecret(),
        	'redirect_uri'  => $this->credentials->getCallbackUrl(),
        	'grant_type'    => 'authorization_code',
            'code'             => $code,
        	'consumer_key'     => $this->credentials->getConsumerId()
        );

        $responseBody = $this->httpClient->retrieveResponse(
            $this->getAccessTokenEndpoint(),
            $bodyParams,
            $this->getExtraOAuthHeaders()
        );
        $token = $this->parseAccessTokenResponse($responseBody);
        $this->storage->storeAccessToken($this->service(), $token);

        return $token;
    }

    /**
     * {@inheritdoc}
     */
    protected function parseAccessTokenResponse($responseBody)
    {
    	$data = json_decode($responseBody, true);

        if ($data === null || !is_array($data)) {
            throw new TokenResponseException('Unable to parse response.');
        } elseif (isset($data['error'])) {
        	throw new TokenResponseException('Error in retrieving token: "' . $data['error'] . (isset($data['error_description']) ? ' - '.$data['error_description'] : '').'"');
        }

        $token = new StdOAuth2Token();
        #$token->setRequestToken($data['access_token']);
        $token->setAccessToken($data['access_token']);

        $token->setEndOfLife(StdOAuth2Token::EOL_NEVER_EXPIRES);

        unset($data['access_token']);

        $token->setExtraParams($data);

        return $token;
    }
}
