// Copyright (C) 2024 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR BSD-3-Clause

#include <QtNetworkAuth/qoauth2authorizationcodeflow.h>
#include <QtNetworkAuth/qoauth2deviceauthorizationflow.h>
#include <QtNetworkAuth/qoauthhttpserverreplyhandler.h>
#include <QtNetworkAuth/qoauthurischemereplyhandler.h>

#ifdef QT_WEBENGINEWIDGETS_LIB
#include <QtWebEngineWidgets/qwebengineview.h>
#include <QtWidgets/qmainwindow.h>
#endif

#include <QtNetwork/qnetworkrequestfactory.h>
#include <QtNetwork/qrestaccessmanager.h>

#ifdef QT_QML_LIB
#include <QtQml/qqmlregistration.h>
#endif

#include <QtGui/qdesktopservices.h>

#include <QtCore/qjsondocument.h>
#include <QtCore/qjsonobject.h>
#include <QtCore/qobject.h>
#include <QtCore/qurl.h>

using namespace Qt::StringLiterals;

//! [webengine-qml-control]
class HttpExample : public QObject
{
    Q_OBJECT
#ifdef QT_QML_LIB
    QML_NAMED_ELEMENT(OAuth2)
#endif
public:
    Q_INVOKABLE void authorize();

signals:
    void authorizationCompleted(bool success);
    void authorizeWithBrowser(const QUrl &url);
//! [webengine-qml-control]

public:
    HttpExample();
    void setupSystemBrowser();
    void setupSystemBrowserLocalHostHttps();
    void setupWebEngineWidgets();
    void setupDeviceFlow();

    void readOIDCConfiguration(const QUrl &url);
    void readJSONWebKeySet(const QUrl &url);
    void readUserInfo(const QUrl &url) const;
    bool verifyIDToken() const;

private:
    //! [httpserver-variables]
    QOAuth2AuthorizationCodeFlow m_oauth;
    QOAuthHttpServerReplyHandler *m_handler = nullptr;
    //! [httpserver-variables]
    QNetworkRequestFactory m_api;
    QRestAccessManager *m_network = nullptr;
#ifdef QT_WEBENGINEWIDGETS_LIB
    QWebEngineView *webView = nullptr;
    QMainWindow mainWindow;
#endif
    std::optional<QJsonDocument> m_jwks;

    //! [deviceflow-variables]
    QOAuth2DeviceAuthorizationFlow m_deviceFlow;
    //! [deviceflow-variables]

    //! [oidc-id-token-struct]
    struct IDToken {
        QJsonObject header;
        QJsonObject payload;
        QByteArray signature;
    };
    //! [oidc-id-token-struct]
    std::optional<QJsonObject> m_oidcConfig;

    //! [oidc-id-token-parser-declaration]
    std::optional<IDToken> parseIDToken(const QString &token) const;
    //! [oidc-id-token-parser-declaration]
};

class UriSchemeExample : public QObject
{
    Q_OBJECT
public:
    UriSchemeExample();
    void setupSystemBrowserCustom();
    void setupWebEngineWidgetsCustom();
    void setupWebEngineWidgetsHttps();

private:
    //! [uri-variables]
    QOAuth2AuthorizationCodeFlow m_oauth;
    QOAuthUriSchemeReplyHandler m_handler;
    //! [uri-variables]
    QNetworkRequestFactory m_api;
#ifdef QT_WEBENGINEWIDGETS_LIB
    //! [webengine-widget-variables]
    QWebEngineView *webView = nullptr;
    QMainWindow mainWindow;
    //! [webengine-widget-variables]
#endif
};