anzar-shared 0.9.21

use std::sync::Arc;

use base64::{Engine, prelude::BASE64_URL_SAFE_NO_PAD};
use hmac::Mac;
use rand::TryRngCore;

use crate::{
    domain::model::{Account, User},
    utils::crypto::Hashable,
};

pub struct FakeUserGenerator {
    secret_key: String,
}

impl FakeUserGenerator {
    pub fn new(secret_key: &str) -> Self {
        Self {
            secret_key: secret_key.into(),
        }
    }

    pub fn generate_fake_user(&self, email: &str) -> User {
        // Use HMAC to derive deterministic but unpredictable fake user ID
        let mut mac = hmac::Hmac::<sha2::Sha256>::new_from_slice(self.secret_key.as_bytes())
            .expect("HMAC can take key of any size");
        mac.update(b"fake_user_id");
        mac.update(email.as_bytes());
        let result = mac.finalize().into_bytes();

        // Convert first 16 bytes to UUID
        let mut uuid_bytes = [0u8; 16];
        uuid_bytes.copy_from_slice(&result[..16]);
        let fake_id = uuid::Uuid::from_bytes(uuid_bytes);

        User {
            id: Some(fake_id.to_string()),
            username: "some name".to_string(),
            email: email.to_string(),
            created_at: chrono::Utc::now(),
        }
    }

    pub fn generate_fake_account(&self, password_hasher: &Arc<dyn Hashable>) -> Account {
        // Generate different fake hash for each email
        let fake_password = {
            let mut bytes = [0u8; 32];
            let _ = rand::rngs::OsRng.try_fill_bytes(&mut bytes);
            BASE64_URL_SAFE_NO_PAD.encode(bytes)
        };

        Account {
            id: None,
            user_id: "".into(),
            password: password_hasher.hash(&fake_password).unwrap_or_default(),
            locked: false,
            verified: false,
            created_at: chrono::Utc::now(),
        }
    }
}