const MODULE_NAME = 'CALLBACK.APIKEY-CHECKER';

const config = require('komodo-sdk/config');
const logger = require('tektrans-logger');

const DEBUG_CALLBACK_APIKEY = process.env.DEBUG_CALLBACK_APIKEY
    || (config.partner && config.partner.callback && config.partner.callback.debug_apikey);

const sendInvalidApikeyResponse = (xid, res) => {
    res.status(403).json({
        status: 'NOT-OK',
        error: 'Invalid APIKEY',
        ts: new Date(),
        xid,
    });
};

if (!config.partner.callback.apikey) {
    logger.warn(`${MODULE_NAME} 56420201: Missing config.partner.callback.apikey. Please consider to set it for security reason`);
}

module.exports = (req, res, next) => {
    const { xid } = res.locals;
    const apikeyFromRequest = req.params.apikey;

    if (!config.partner || !config.partner.callback || !config.partner.callback.apikey) {
        if (DEBUG_CALLBACK_APIKEY) {
            logger.verbose(`${MODULE_NAME} 8BE57EB4: Skip APIKEY checker on no config`, {
                xid,
            });
        }
        next();
        return;
    }

    if (DEBUG_CALLBACK_APIKEY) {
        logger.verbose(`${MODULE_NAME} 1A634029: Checking for apikey validity`, {
            xid,
            apikeyFromRequest,
        });
    }

    if (
        typeof config.partner.callback.apikey === 'object'
        && Array.isArray(config.partner.callback.apikey)
        && config.partner.callback.apikey.indexOf(apikeyFromRequest) >= 0
    ) {
        if (DEBUG_CALLBACK_APIKEY) {
            logger.verbose(`${MODULE_NAME} 4BC7B45D: Apikey match with one of array element`, {
                xid,
                apikeyFromRequest,
            });
        }

        next();
        return;
    }

    if (
        typeof config.partner.callback.apikey === 'string'
        && config.partner.callback.apikey === apikeyFromRequest
    ) {
        if (DEBUG_CALLBACK_APIKEY) {
            logger.verbose(`${MODULE_NAME} FC80DC85: Apikey match with string config`, {
                xid,
                apikeyFromRequest,
            });
        }
        next();
        return;
    }

    logger.warn(`${MODULE_NAME} A4D719C2: Invalid apikey`, {
        xid,
        remoteIp: req.ip,
        url: req.url,
        apikeyFromRequest,
    });

    sendInvalidApikeyResponse(xid, res);
};