package credentials

import (
	"github.com/acorn-io/baaah/pkg/merr"
	"github.com/acorn-io/runtime/pkg/config"
	"github.com/docker/cli/cli/config/credentials"
	"github.com/docker/cli/cli/config/types"
	"github.com/docker/docker-credential-helpers/client"
	credentials2 "github.com/docker/docker-credential-helpers/credentials"
)

const prefix = "acorn-credential-"

func NewHelper(c *config.CLIConfig, helper string) (credentials.Store, error) {
	return &HelperStore{
		file:    credentials.NewFileStore(c),
		program: client.NewShellProgramFunc(prefix + helper),
	}, nil
}

type HelperStore struct {
	file    credentials.Store
	program client.ProgramFunc
}

func (h *HelperStore) Erase(serverAddress string) error {
	var errs []error
	if err := client.Erase(h.program, serverAddress); err != nil {
		errs = append(errs, err)
	}
	if err := h.file.Erase(serverAddress); err != nil {
		errs = append(errs, err)
	}
	return merr.NewErrors(errs...)
}

func (h *HelperStore) Get(serverAddress string) (types.AuthConfig, error) {
	creds, err := client.Get(h.program, serverAddress)
	if credentials2.IsErrCredentialsNotFound(err) {
		return h.file.Get(serverAddress)
	} else if err != nil {
		return types.AuthConfig{}, err
	}
	return types.AuthConfig{
		Username:      creds.Username,
		Password:      creds.Secret,
		ServerAddress: serverAddress,
	}, nil
}

func (h *HelperStore) GetAll() (map[string]types.AuthConfig, error) {
	result := map[string]types.AuthConfig{}

	serverAddresses, err := client.List(h.program)
	if err != nil {
		return nil, err
	}

	for serverAddress := range serverAddresses {
		ac, err := h.Get(serverAddress)
		if err != nil {
			return nil, err
		}
		result[serverAddress] = ac
	}

	return result, nil
}

func (h *HelperStore) Store(authConfig types.AuthConfig) error {
	return client.Store(h.program, &credentials2.Credentials{
		ServerURL: authConfig.ServerAddress,
		Username:  authConfig.Username,
		Secret:    authConfig.Password,
	})
}
