// Copyright 2019 Yunion
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package baidu

import (
	"context"
	"crypto/tls"
	"fmt"
	"io"
	"net/http"
	"net/url"
	"strings"
	"sync"
	"time"

	"yunion.io/x/jsonutils"
	"yunion.io/x/pkg/errors"
	"yunion.io/x/pkg/gotypes"
	"yunion.io/x/pkg/util/httputils"

	api "yunion.io/x/cloudmux/pkg/apis/compute"
	"yunion.io/x/cloudmux/pkg/cloudprovider"
)

const (
	CLOUD_PROVIDER_BAIDU_CN = "百度云"
	BAIDU_DEFAULT_REGION    = "bj"
	ISO8601                 = "2006-01-02T15:04:05Z"

	SERVICE_STS     = "sts"
	SERVICE_BBC     = "bbc"
	SERVICE_BCC     = "bcc"
	SERVICE_BOS     = "bos"
	SERVICE_EIP     = "eip"
	SERVICE_BCM     = "bcm"
	SERVICE_BILLING = "billing"
)

type BaiduClientConfig struct {
	cpcfg           cloudprovider.ProviderConfig
	accessKeyId     string
	accessKeySecret string

	debug bool
}

type SBaiduClient struct {
	*BaiduClientConfig

	client *http.Client
	lock   sync.Mutex
	ctx    context.Context

	ownerId string
}

func NewBaiduClientConfig(accessKeyId, accessKeySecret string) *BaiduClientConfig {
	cfg := &BaiduClientConfig{
		accessKeyId:     accessKeyId,
		accessKeySecret: accessKeySecret,
	}
	return cfg
}

func (cfg *BaiduClientConfig) Debug(debug bool) *BaiduClientConfig {
	cfg.debug = debug
	return cfg
}

func (cfg *BaiduClientConfig) CloudproviderConfig(cpcfg cloudprovider.ProviderConfig) *BaiduClientConfig {
	cfg.cpcfg = cpcfg
	return cfg
}

func NewBaiduClient(cfg *BaiduClientConfig) (*SBaiduClient, error) {
	client := &SBaiduClient{
		BaiduClientConfig: cfg,
		ctx:               context.Background(),
	}
	client.ctx = context.WithValue(client.ctx, "time", time.Now())
	_, err := client.getOwnerId()
	return client, err
}

func (cli *SBaiduClient) GetRegions() ([]SRegion, error) {
	resp, err := cli.post(SERVICE_BCC, "", "v2/region/describeRegions", nil, nil)
	if err != nil {
		return nil, err
	}
	ret := []SRegion{}
	err = resp.Unmarshal(&ret, "regions")
	if err != nil {
		return nil, err
	}
	for i := range ret {
		ret[i].client = cli
	}
	return ret, nil
}

func (cli *SBaiduClient) GetRegion(id string) (*SRegion, error) {
	regions, err := cli.GetRegions()
	if err != nil {
		return nil, err
	}
	for i := range regions {
		if regions[i].GetId() == id || regions[i].GetGlobalId() == id {
			return &regions[i], nil
		}
	}
	return nil, errors.Wrapf(cloudprovider.ErrNotFound, "%s", id)
}

func (cli *SBaiduClient) getUrl(service, regionId, bucketName, resource string) (string, error) {
	if len(regionId) == 0 {
		regionId = BAIDU_DEFAULT_REGION
	}
	switch service {
	case SERVICE_BBC:
		return fmt.Sprintf("https://bbc.%s.baidubce.com/%s", regionId, strings.TrimPrefix(resource, "/")), nil
	case SERVICE_BCC:
		return fmt.Sprintf("https://bcc.%s.baidubce.com/%s", regionId, strings.TrimPrefix(resource, "/")), nil
	case SERVICE_BOS:
		if len(bucketName) > 0 {
			return fmt.Sprintf("https://%s.%s.bcebos.com/%s", bucketName, regionId, strings.TrimPrefix(resource, "/")), nil
		}
		return fmt.Sprintf("https://%s.bcebos.com/%s", regionId, strings.TrimPrefix(resource, "/")), nil
	case SERVICE_BILLING:
		return fmt.Sprintf("https://billing.baidubce.com/%s", strings.TrimPrefix(resource, "/")), nil
	case SERVICE_STS:
		return fmt.Sprintf("https://sts.bj.baidubce.com/v1/%s", strings.TrimPrefix(resource, "/")), nil
	case SERVICE_EIP:
		return fmt.Sprintf("https://eip.%s.baidubce.com/%s", regionId, strings.TrimPrefix(resource, "/")), nil
	case SERVICE_BCM:
		return fmt.Sprintf("http://bcm.%s.baidubce.com/%s", regionId, strings.TrimPrefix(resource, "/")), nil
	default:
		return "", errors.Wrapf(cloudprovider.ErrNotSupported, "%s", service)
	}
}

func (cli *SBaiduClient) getDefaultClient() *http.Client {
	cli.lock.Lock()
	defer cli.lock.Unlock()
	if !gotypes.IsNil(cli.client) {
		return cli.client
	}
	cli.client = httputils.GetAdaptiveTimeoutClient()
	httputils.SetClientProxyFunc(cli.client, cli.cpcfg.ProxyFunc)
	ts, _ := cli.client.Transport.(*http.Transport)
	ts.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
	cli.client.Transport = cloudprovider.GetCheckTransport(ts, func(req *http.Request) (func(resp *http.Response) error, error) {
		if cli.cpcfg.ReadOnly {
			if req.Method == "GET" {
				return nil, nil
			}
			return nil, errors.Wrapf(cloudprovider.ErrAccountReadOnly, "%s %s", req.Method, req.URL.Path)
		}
		return nil, nil
	})
	return cli.client
}

func (cli *SBaiduClient) bosList(regionId, bucketName, resource string, params url.Values) (jsonutils.JSONObject, error) {
	resp, err := cli.raw_request(httputils.GET, SERVICE_BOS, regionId, bucketName, resource, params, nil, nil)
	if err != nil {
		return nil, err
	}
	_, ret, err := httputils.ParseJSONResponse("", resp, err, cli.debug)
	if err != nil {
		return nil, errors.Wrapf(err, "ParseJSONResponse")
	}
	if gotypes.IsNil(ret) {
		return jsonutils.NewDict(), nil
	}
	return ret, nil
}

func (cli *SBaiduClient) bosDelete(regionId, bucketName, resource string, params url.Values) (jsonutils.JSONObject, error) {
	resp, err := cli.raw_request(httputils.DELETE, SERVICE_BOS, regionId, bucketName, resource, params, nil, nil)
	if err != nil {
		return nil, err
	}
	_, ret, err := httputils.ParseJSONResponse("", resp, err, cli.debug)
	if err != nil {
		return nil, errors.Wrapf(err, "ParseJSONResponse")
	}
	if gotypes.IsNil(ret) {
		return jsonutils.NewDict(), nil
	}
	return ret, nil
}

func (cli *SBaiduClient) bosUpdate(regionId, bucketName, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	var bodyReader io.Reader = nil
	if !gotypes.IsNil(body) {
		bodyReader = strings.NewReader(jsonutils.Marshal(body).String())
	}
	resp, err := cli.raw_request(httputils.PUT, SERVICE_BOS, regionId, bucketName, resource, params, nil, bodyReader)
	if err != nil {
		return nil, err
	}
	_, ret, err := httputils.ParseJSONResponse("", resp, err, cli.debug)
	if err != nil {
		return nil, errors.Wrapf(err, "ParseJSONResponse")
	}
	if gotypes.IsNil(ret) {
		return jsonutils.NewDict(), nil
	}
	return ret, nil
}

func (cli *SBaiduClient) bosRequest(method httputils.THttpMethod, regionId, bucketName, resource string, params url.Values, header http.Header, body io.Reader) (*http.Response, error) {
	return cli.raw_request(method, SERVICE_BOS, regionId, bucketName, resource, params, header, body)
}

func (cli *SBaiduClient) eipList(regionId, resource string, params url.Values) (jsonutils.JSONObject, error) {
	return cli.list(SERVICE_EIP, regionId, resource, params)
}

func (cli *SBaiduClient) eipPost(regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.post(SERVICE_EIP, regionId, resource, params, body)
}

func (cli *SBaiduClient) eipDelete(regionId, resource string, params url.Values) (jsonutils.JSONObject, error) {
	return cli.delete(SERVICE_EIP, regionId, resource, params)
}

func (cli *SBaiduClient) eipUpdate(regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.update(SERVICE_EIP, regionId, resource, params, body)
}

func (cli *SBaiduClient) bccList(regionId, resource string, params url.Values) (jsonutils.JSONObject, error) {
	return cli.list(SERVICE_BCC, regionId, resource, params)
}

func (cli *SBaiduClient) bccPost(regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.post(SERVICE_BCC, regionId, resource, params, body)
}

func (cli *SBaiduClient) bccDelete(regionId, resource string, params url.Values) (jsonutils.JSONObject, error) {
	return cli.delete(SERVICE_BCC, regionId, resource, params)
}

func (cli *SBaiduClient) bccUpdate(regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.update(SERVICE_BCC, regionId, resource, params, body)
}

func (cli *SBaiduClient) bcmPost(regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.post(SERVICE_BCM, regionId, resource, params, body)
}

func (cli *SBaiduClient) list(service, regionId, resource string, params url.Values) (jsonutils.JSONObject, error) {
	return cli.request(httputils.GET, service, regionId, resource, params, nil)
}

func (cli *SBaiduClient) update(service, regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.request(httputils.PUT, service, regionId, resource, params, body)
}

func (cli *SBaiduClient) delete(service, regionId, resource string, params url.Values) (jsonutils.JSONObject, error) {
	return cli.request(httputils.DELETE, service, regionId, resource, params, nil)
}

func (cli *SBaiduClient) post(service, regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	return cli.request(httputils.POST, service, regionId, resource, params, body)
}

func (cli *SBaiduClient) request(method httputils.THttpMethod, service, regionId, resource string, params url.Values, body map[string]interface{}) (jsonutils.JSONObject, error) {
	var bodyReader io.Reader = nil
	if !gotypes.IsNil(body) {
		bodyReader = strings.NewReader(jsonutils.Marshal(body).String())
	}
	header := http.Header{}
	header.Set("Content-Type", "application/json; charset=utf-8")
	resp, err := cli.raw_request(method, service, regionId, "", resource, params, header, bodyReader)
	if err != nil {
		return nil, err
	}
	_, ret, err := httputils.ParseJSONResponse("", resp, err, cli.debug)
	if err != nil {
		return nil, errors.Wrapf(err, "ParseJSONResponse")
	}
	if gotypes.IsNil(ret) {
		return jsonutils.NewDict(), nil
	}
	return ret, nil
}

func (cli *SBaiduClient) raw_request(method httputils.THttpMethod, service, regionId, bucketName, resource string, params url.Values, header http.Header, body io.Reader) (*http.Response, error) {
	uri, err := cli.getUrl(service, regionId, bucketName, resource)
	if err != nil {
		return nil, err
	}

	if len(params) > 0 {
		uri = fmt.Sprintf("%s?%s", uri, params.Encode())
	}

	if gotypes.IsNil(header) {
		header = http.Header{}
	}

	burl, err := url.Parse(uri)
	if err != nil {
		return nil, err
	}

	header.Set("x-bce-date", time.Now().UTC().Format(ISO8601))
	header.Set("host", burl.Host)

	signature, err := cli.sign(burl, string(method), header)
	if err != nil {
		return nil, errors.Wrapf(err, "sign raw request")
	}
	header.Set("Authorization", signature)

	resp, err := httputils.Request(cli.getDefaultClient(), cli.ctx, method, uri, header, body, cli.debug)
	if err != nil {
		return nil, err
	}
	return resp, nil
}

func (cli *SBaiduClient) GetSubAccounts() ([]cloudprovider.SSubAccount, error) {
	subAccount := cloudprovider.SSubAccount{}
	subAccount.Id = cli.GetAccountId()
	subAccount.Name = cli.cpcfg.Name
	subAccount.Account = cli.accessKeyId
	subAccount.HealthStatus = api.CLOUD_PROVIDER_HEALTH_NORMAL
	return []cloudprovider.SSubAccount{subAccount}, nil
}

func (cli *SBaiduClient) getOwnerId() (string, error) {
	if len(cli.ownerId) > 0 {
		return cli.ownerId, nil
	}
	session, err := cli.GetSessionToken()
	if err != nil {
		return "", err
	}
	cli.ownerId = session.UserId
	return cli.ownerId, nil
}

func (cli *SBaiduClient) GetAccountId() string {
	ownerId, _ := cli.getOwnerId()
	return ownerId
}

type CashBalance struct {
	CashBalance float64
}

func (cli *SBaiduClient) QueryBalance() (*CashBalance, error) {
	resp, err := cli.post("billing", "", "/v1/finance/cash/balance", nil, nil)
	if err != nil {
		return nil, err
	}
	ret := &CashBalance{}
	err = resp.Unmarshal(ret)
	if err != nil {
		return nil, errors.Wrapf(err, "resp.Unmarshal")
	}
	return ret, nil
}

func (cli *SBaiduClient) GetCapabilities() []string {
	caps := []string{
		cloudprovider.CLOUD_CAPABILITY_COMPUTE,
		cloudprovider.CLOUD_CAPABILITY_NETWORK,
		cloudprovider.CLOUD_CAPABILITY_SECURITY_GROUP,
		cloudprovider.CLOUD_CAPABILITY_EIP,
		cloudprovider.CLOUD_CAPABILITY_SNAPSHOT_POLICY,
		cloudprovider.CLOUD_CAPABILITY_OBJECTSTORE,
	}
	return caps
}