# frozen_string_literal: true

module Saml
  module Kit
    module Builders
      # This class is responsible for building a SAML Assertion
      # {include:file:lib/saml/kit/builders/templates/assertion.builder}
      class Assertion
        include XmlTemplatable
        extend Forwardable

        def_delegators :@response_builder,
          :request, :issuer, :reference_id, :now, :configuration, :user,
          :version, :destination

        attr_accessor :default_name_id_format

        def initialize(response_builder, embed_signature)
          @response_builder = response_builder
          self.embed_signature = embed_signature
          self.default_name_id_format = Saml::Kit::Namespaces::UNSPECIFIED_NAMEID
        end

        def name_id_format
          request.try(:name_id_format)
        end

        def name_id
          user.name_id_for(name_id_format)
        end

        def assertion_attributes
          return {} unless user.respond_to?(:assertion_attributes_for)
          user.assertion_attributes_for(request)
        end

        def signing_key_pair
          super || @response_builder.signing_key_pair
        end

        private

        def assertion_options
          {
            ID: reference_id,
            IssueInstant: now.iso8601,
            Version: version,
            xmlns: Namespaces::ASSERTION,
          }
        end

        def subject_confirmation_data_options
          options = {}
          options[:InResponseTo] = request.id if request.present?
          options[:Recipient] = destination if destination.present?
          options
        end

        def conditions_options
          {
            NotBefore: now.utc.iso8601,
            NotOnOrAfter: not_on_or_after.iso8601,
          }
        end

        def authn_statement_options
          {
            AuthnInstant: now.iso8601,
            SessionIndex: reference_id,
          }
        end

        def name_id_options
          { Format: name_id_format || default_name_id_format }
        end

        def not_on_or_after
          configuration.session_timeout.since(now).utc
        end
      end
    end
  end
end