module Grenache
  class Http < Grenache::Base

    default_conf do |conf|
      conf.thin_threaded = true
      conf.thin_threadpool_size = 10
      conf.verify_mode = Grenache::SSL_VERIFY_PEER
      conf.thin_timeout = 30
      conf.thin_max_conns = 1024
      conf.thin_max_persistent_conns = 512
      conf.thin_no_epoll = false
    end

    def listen(key, port,  opts={}, &block)
      start_http_service(port,&block)

      announce(key, port, opts) do |res|
        puts "#{key} announced #{res}"
      end
    end

    def start_http_service(port, &block)
      EM.defer {
        app = -> (env) {
          req = ServiceMessage.parse(env['rack.input'].read)
          fingerprint = extract_fingerprint(env['rack.peer_cert'])
          e, payload = block.call(req, fingerprint)
          err = e.kind_of?(Exception) ? e.message : e
          [200,nil, ServiceMessage.new(payload, err, req.rid).to_json]
        }
        server = Thin::Server.new config.service_host, port, {signals: false}, app

        if config.thin_threaded
          server.threaded = true
          server.threadpool_size = config.thin_threadpool_size
        end

        # Configure thin
        server.timeout = config.thin_timeout
        server.maximum_connections = config.thin_max_conns
        server.maximum_persistent_connections = config.thin_max_persistent_conns
        server.no_epoll = config.thin_no_epoll

        if tls?
          server.ssl = true
          server.ssl_options = {
            private_key_file: config.key,
            cert_chain_file: config.cert_pem,
            ecdh_curve: config.cert_ecdh_curve,
            verify_peer: true
          }

          server.backend.ca_cert = config.ca
        end
        server.start
      }
    end

    def request(key, payload, params={})
      services = lookup(key)
      if services && services.size > 0
        json = ServiceMessage.new(payload,key).to_json
        service = get_random_service services
        resp = http_client.request service, json, params
        msg = ServiceMessage.parse(resp.body)
        return [msg.err, msg.payload]
      else
        return ["NoPeerFound",nil]
      end
    rescue Exception => e
      return [e, nil]
    end

    def put(payload, params={})
      resp = link.send('put', payload, params)
      return [nil, resp]
    rescue Exception => e
      return [e, nil]
    end

    def get(t_hash, params={})
      resp = link.send('get', t_hash, params)
      return [nil, Oj.dump(resp)]
    rescue Exception => e
      return [e, nil]
    end

    private

    def tls?
      !! config.cert_pem
    end

    def extract_fingerprint cert
      return "" unless cert
      cert = OpenSSL::X509::Certificate.new cert
      OpenSSL::Digest::SHA1.new(cert.to_der).to_s
    end

    def http_client
      @http_client ||= HttpClient.new(config)
    end

    def get_random_service services
      service = services.sample
      proto = tls? ? 'https://' : 'http://'
      service = service.sub('tcp://', proto)
      service.prepend(proto) unless service.start_with?(proto)
      service
    end
  end
end