<SuperTokensComponentNoSSR />

import ThirdPartyNode from "supertokens-node/recipe/thirdparty";
import SessionNode from "supertokens-node/recipe/session";
import { appInfo } from "./appInfo";
import { TypeInput } from "supertokens-node/types";
import { getUserByThirdPartyUserID, getUserByEmail } from "lib/db/query";

export const backendConfig = (): TypeInput => {
  return {
    framework: "express",
    supertokens: {
      // try.supertokens.com is for demo purposes. Replace this with the address of your core instance (sign up on supertokens.com), or self host a core.
      connectionURI: process.env.AUTH_SERVER || ""
      // apiKey: "IF YOU HAVE AN API KEY FOR THE CORE, ADD IT HERE",
    },
    appInfo,
    recipeList: [
      ThirdPartyNode.init({
        signInAndUpFeature: {
          providers: [
            // We have provided you with development keys which you can use for testsing.
            // IMPORTANT: Please replace them with your own OAuth keys for production use.
            ThirdPartyNode.Google({
              clientId: process.env.GOOGLE_ID || "",
              clientSecret: process.env.GOOGLE_SECRET || ""
            })
          ]
        },
        override: {
          functions: (originalImplementation) => {
            return {
              ...originalImplementation,
              signInUp: async (input) => {
                console.log("Check if should signup", input.email.id);
                let user = await getUserByEmail(input.email.id);

                if (user !== null) {
                  return await originalImplementation.signInUp(input);
                }
                throw new Error("Not allowed to signup");
              }
            };
          },
          apis: (originalImplementation) => {
            return {
              ...originalImplementation
              //              signInUpPOST: undefined
            };
          }
        }
      }),
      SessionNode.init({
        jwt: {
          enable: true
        },
        override: {
          functions: function (originalImplementation) {
            return {
              ...originalImplementation,
              createNewSession: async function (input) {
                let user = await getUserByThirdPartyUserID(input.userId);
                if (!user || !user.is_active) {
                  throw new Error("User not found");
                }

                input.accessTokenPayload = {
                  ...input.accessTokenPayload,
                  "https://hasura.io/jwt/claims": {
                    "x-hasura-user-id": input.userId,
                    "x-hasura-default-role": user.is_admin ? "admin" : "user",
                    "x-hasura-allowed-roles": user.is_admin ? ["admin", "user"] : ["user"]
                  }
                };

                return originalImplementation.createNewSession(input);
              }
            };
          }
        }
      })
    ]
  };
};

ThirdPartyNode.init({
        signInAndUpFeature: {
          providers: [
            // We have provided you with development keys which you can use for testsing.
            // IMPORTANT: Please replace them with your own OAuth keys for production use.
            ThirdPartyNode.Google({
              clientId: process.env.GOOGLE_ID || "",
              clientSecret: process.env.GOOGLE_SECRET || ""
            })
          ]
        },
        override: {
          functions: (originalImplementation) => {
            return {
              ...originalImplementation,
              signInUp: async (input) => {
                console.log("Check if should signup", input.email.id);
                let user = await getUserByEmail(input.email.id);

                if (user !== null) {
                  return await originalImplementation.signInUp(input);
                }
                throw new Error("Not allowed to signup");
              }
            };
          },
          apis: (originalImplementation) => {
            return {
              ...originalImplementation
              //              signInUpPOST: undefined
            };
          }
        }
      }),

getUserByEmail