module Avo
  module Services
    class AuthorizationService
      attr_accessor :user
      attr_accessor :record

      def initialize(user = nil, record = nil)
        @user = user
        @record = record
      end

      def authorize(action, **args)
        self.class.authorize(user, record, action, **args)
      end

      def set_record(record)
        @record = record

        self
      end

      def set_user(user)
        @user = user

        self
      end

      def authorize_action(action, **args)
        self.class.authorize_action(user, record, action, **args)
      end

      def apply_policy(model)
        self.class.apply_policy(user, model)
      end

      def defined_methods(model, **args)
        self.class.defined_methods(user, model, **args)
      end

      class << self
        def authorize(user, record, action, **args)
          return true if skip_authorization
          return true if user.nil?

          begin
            if Pundit.policy user, record
              Pundit.authorize user, record, action
            end

            true
          rescue Pundit::NotDefinedError => e
            return false unless Avo.configuration.raise_error_on_missing_policy

            raise e
          rescue => error
            if args[:raise_exception] == false
              false
            else
              raise error
            end
          end
        end

        def authorize_action(user, record, action, **args)
          action = Avo.configuration.authorization_methods.stringify_keys[action.to_s] || action

          return true if action.nil?

          authorize user, record, action, **args
        end

        def apply_policy(user, model)
          return model if skip_authorization
          return model if user.nil?

          begin
            Pundit.policy_scope! user, model
          rescue Pundit::NotDefinedError => e
            return model unless Avo.configuration.raise_error_on_missing_policy

            raise e
          end
        end

        def skip_authorization
          Avo::App.license.lacks_with_trial :authorization
        end

        def authorized_methods(user, record)
          [:new, :edit, :update, :show, :destroy].map do |method|
            [method, authorize(user, record, Avo.configuration.authorization_methods[method])]
          end.to_h
        end

        def get_policy(user, record)
          Pundit.policy user, record
        end

        def defined_methods(user, record, **args)
          begin
            Pundit.policy!(user, record).methods
          rescue => error
            if args[:raise_exception] == false
              false
            else
              raise error
            end
          end
        end
      end
    end
  end
end