// Copyright 2023 Harness, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package infraprovider

import (
	"context"
	"fmt"
	"net/http"
	"path/filepath"

	"github.com/harness/gitness/infraprovider/enum"

	"github.com/docker/docker/client"
	"github.com/docker/go-connections/tlsconfig"
)

type DockerClientFactory struct {
	config *DockerConfig
}

func NewDockerClientFactory(config *DockerConfig) *DockerClientFactory {
	return &DockerClientFactory{config: config}
}

// NewDockerClient returns a new docker client created using the docker config and infra.
func (d *DockerClientFactory) NewDockerClient(
	_ context.Context,
	infra *Infrastructure,
) (*client.Client, error) {
	if infra.ProviderType != enum.InfraProviderTypeDocker {
		return nil, fmt.Errorf("infra provider type %s not supported", infra.ProviderType)
	}
	dockerClient, err := d.getClient(infra.Parameters)
	if err != nil {
		return nil, fmt.Errorf("error creating docker client using infra %+v: %w", infra, err)
	}
	return dockerClient, nil
}

func (d *DockerClientFactory) getClient(_ []Parameter) (*client.Client, error) {
	var opts []client.Opt

	opts = append(opts, client.WithHost(d.config.DockerHost))

	opts = append(opts, client.WithVersion(d.config.DockerAPIVersion))

	if d.config.DockerCertPath != "" {
		httpsClient, err := d.getHTTPSClient()
		if err != nil {
			return nil, fmt.Errorf("unable to create https client for docker client: %w", err)
		}
		opts = append(opts, client.WithHTTPClient(httpsClient))
	}

	dockerClient, err := client.NewClientWithOpts(opts...)
	if err != nil {
		return nil, fmt.Errorf("unable to create docker client: %w", err)
	}

	return dockerClient, nil
}

func (d *DockerClientFactory) getHTTPSClient() (*http.Client, error) {
	options := tlsconfig.Options{
		CAFile:             filepath.Join(d.config.DockerCertPath, "ca.pem"),
		CertFile:           filepath.Join(d.config.DockerCertPath, "cert.pem"),
		KeyFile:            filepath.Join(d.config.DockerCertPath, "key.pem"),
		InsecureSkipVerify: d.config.DockerTLSVerify == "",
	}
	tlsc, err := tlsconfig.Client(options)
	if err != nil {
		return nil, err
	}
	return &http.Client{
		Transport:     &http.Transport{TLSClientConfig: tlsc},
		CheckRedirect: client.CheckRedirect,
	}, nil
}