# frozen_string_literal: true

require 'octokit'
require 'sinatra_auth_github'
require 'dotenv'
require_relative 'add-to-org/helpers'

module AddToOrg
  def self.root
    File.expand_path './add-to-org', File.dirname(__FILE__)
  end

  def self.views_dir
    @views_dir ||= File.expand_path 'views', AddToOrg.root
  end

  def self.views_dir=(dir)
    @views_dir = dir
  end

  def self.public_dir
    @public_dir ||= File.expand_path 'public', AddToOrg.root
  end

  def self.public_dir=(dir)
    @public_dir = dir
  end

  def self.validator=(validator)
    @validator = validator
  end

  def self.set_validator(&block)
    @validator = block
  end

  def self.validator
    @validator ||= proc { raise 'You must define a custom validator to determine eligibility' }
  end

  class App < Sinatra::Base
    include AddToOrg::Helpers

    set :github_options, {
      scopes: 'read:org,user:email'
    }

    use Rack::Session::Cookie, {
      http_only: true,
      secret: ENV['SESSION_SECRET'] || SecureRandom.hex
    }

    ENV['WARDEN_GITHUB_VERIFIER_SECRET'] ||= SecureRandom.hex
    register Sinatra::Auth::Github

    set :views, proc { AddToOrg.views_dir }
    set :root,  proc { AddToOrg.root }
    set :public_folder, proc { AddToOrg.public_dir }

    # require ssl
    configure :production do
      require 'rack-ssl-enforcer'
      use Rack::SslEnforcer
    end

    # dat auth
    before do
      session[:return_to] = request.url # store requested URL for post-auth redirect
      authenticate!
    end

    def success(locals = {})
      halt erb :success, locals: locals
    end

    def forbidden
      status 403
      halt erb :forbidden
    end

    def error
      status 500
      halt erb :error
    end

    # request a GitHub (authenticated) URL
    get '/*' do
      path = request.path || "/#{team_id}"
      halt redirect "https://github.com#{path}", 302 if member?
      forbidden unless valid?

      if add
        success({ redirect: "https://github.com#{path}", org_id: org_id })
      else
        error
      end
    end
  end
end

Dotenv.load unless AddToOrg::App.production?