/* openbills - Server for web based Libre Billing Software
 * Copyright (C) 2023-2025  Vidhu Kant Sharma <vidhukant@vidhukant.com>
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

package user

import (
	d "vidhukant.com/openbills/db"
	e "vidhukant.com/openbills/errors"
	"golang.org/x/crypto/bcrypt"
	"gorm.io/gorm"
	"github.com/spf13/viper"
	"errors"
)

var COST int
var db *gorm.DB
func init() {
	db = d.DB

	db.AutoMigrate(&User{}, &Role{})

	COST = viper.GetInt("cryptography.password_hashing_cost")
}

var VALID_ROLES []string = []string {
	"customer.*", "customer.read", "customer.write", "customer.delete",
	"item.*", "item.read", "item.write", "item.delete",
	"invoice.*", "invoice.read", "invoice.write", "invoice.delete",
	"admin", "*.*",
}

type Role struct {
	ID     uint
	UserID uint
	Name   string
}

type User struct {
	ID           uint
	TokenVersion uint // this can be incremented to disable existing refresh token(s)
  Username     string
  Email        string
	Password     string
	Roles        []Role `gorm:"constraint:OnDelete:CASCADE;"`
}

func RolesToStringList(roles []Role) []string {
	x := []string{}

	for _, i := range roles {
		x = append(x, i.Name)
	}

	return x
}

func CheckPassword(user *User, accountName, method, pass string) error {
	err := GetUserByAccountName(user, accountName, method)
	if err != nil {
		return err
	}

	err = bcrypt.CompareHashAndPassword([]byte(user.Password), []byte(pass))
	if err != nil {
		if errors.Is(err, bcrypt.ErrMismatchedHashAndPassword) {
			return e.ErrWrongPassword
		}

		return err
	}

	return nil
}