package util

import (
	"crypto/rand"
	"encoding/hex"
	"net/http"
	"sync"
	"time"
)

type AdminSession struct {
	Expiration time.Time
	Username   string
}

var (
	AdminSessions = make(map[string]AdminSession)
	AdminMutex    = sync.RWMutex{}
)

func GenToken() (string, error) {
	bytes := make([]byte, 32)
	_, err := rand.Read(bytes)
	if err != nil {
		return "", err
	}

	return hex.EncodeToString(bytes), nil
}

func IsAdminSessionValid(token string) bool {
	AdminMutex.RLock()
	session, exists := AdminSessions[token]
	AdminMutex.RUnlock()

	if !exists || time.Now().After(session.Expiration) {
		AdminMutex.Lock()
		delete(AdminSessions, token)
		AdminMutex.Unlock()
		return false
	}

	return true
}

func CreateAdminSession(token string, session AdminSession) {
	AdminMutex.Lock()
	AdminSessions[token] = session
	AdminMutex.Unlock()
}

func DeleteAdminSession(token string) {
	AdminMutex.Lock()
	delete(AdminSessions, token)
	AdminMutex.Unlock()
}

func HasExistingAdminSession(username string) bool {
	AdminMutex.RLock()
	defer AdminMutex.RUnlock()
	for _, session := range AdminSessions {
		if session.Username == username {
			return true
		}
	}

	return false
}

func AdminOnlyMiddleware(next http.Handler) http.Handler {
	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		c, err := r.Cookie("comfy_admin")
		if err != nil || !IsAdminSessionValid(c.Value) {
			http.Error(w, "Unauthorized", http.StatusUnauthorized)
			return
		}
		next.ServeHTTP(w, r)
	})
}