package main

import (
	"log/slog"
	"net/http"
	"os"
	"time"

	"queryorchestration/internal/serviceconfig/auth"

	"github.com/labstack/echo/v4"
	"github.com/labstack/echo/v4/middleware"

	"queryorchestration/internal/cognitoauth" // Replace with your actual package import path
)

func main() {
	// Create a new Echo instance
	e := echo.New()

	// Add basic middleware
	e.Use(middleware.Logger())
	e.Use(middleware.Recover())

	// Initialize logger with appropriate level based on DEBUG env var
	var logLevel slog.Level
	if os.Getenv("DEBUG") == "true" {
		logLevel = slog.LevelDebug
	} else {
		logLevel = slog.LevelInfo
	}

	logHandler := slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{
		Level: logLevel,
	})
	logger := slog.New(logHandler)

	// Create auth config from environment variables
	config := auth.InitializeConfig("http://localhost:8080", logger)

	// Set route permissions
	routePermissions := map[string][]string{
		"/users":                {"exporters", "uploaders", "querybuilders"},
		"/users/:id":            {"exporters", "querybuilders"},
		"/orders":               {"exporters"},
		"/reports/sales":        {"exporters", "uploaders", "querybuilders"},
		"/settings":             {"exporters"},
		"/api/inventory/update": {"exporters", "uploaders"},
	}
	config.SetRoutePermissions(routePermissions)

	// Register authentication routes
	cognitoauth.RegisterRoutes(e, config)

	// Register your application routes
	// These will be protected based on the permissions set above
	e.GET("/users", func(c echo.Context) error {
		return c.String(http.StatusOK, "Users endpoint (OK)")
	})

	e.GET("/users/:id", func(c echo.Context) error {
		id := c.Param("id")
		return c.String(http.StatusOK, "User details endpoint for ID: "+id)
	})

	e.GET("/orders", func(c echo.Context) error {
		return c.String(http.StatusOK, "Orders endpoint (OK)")
	})

	e.GET("/reports/sales", func(c echo.Context) error {
		return c.String(http.StatusOK, "Sales reports endpoint (OK)")
	})

	e.GET("/settings", func(c echo.Context) error {
		return c.String(http.StatusOK, "Settings endpoint (OK)")
	})

	e.PUT("/api/inventory/update", func(c echo.Context) error {
		return c.String(http.StatusOK, "Inventory update endpoint (OK)")
	})

	// Alternative approach: Use the RequireGroups middleware for specific routes
	// This can be used instead of or in addition to the global permissions map
	adminGroup := e.Group("/admin")
	adminGroup.Use(cognitoauth.RequireGroups("admin")) // Only admin group can access this route

	adminGroup.GET("/dashboard", func(c echo.Context) error {
		return c.String(http.StatusOK, "Admin Dashboard (OK)")
	})

	// Configure server
	server := &http.Server{
		Addr:              ":8080",
		ReadHeaderTimeout: 3 * time.Second,
		ReadTimeout:       20 * time.Second,
		WriteTimeout:      20 * time.Second,
		IdleTimeout:       120 * time.Second,
	}

	// Start server
	logger.Info("Server starting on :8080")
	e.Logger.Fatal(e.StartServer(server))
}