csvpp 0.5.0

use crate::{Compiler, Error, Result};
use log::info;
use std::env;
use std::fs;
use std::path;

/// The file containing credentials that will be used to connect to Sheets API
#[derive(Debug)]
pub(super) struct Credentials {
    pub(super) file: path::PathBuf,
}

fn adc_path() -> Result<path::PathBuf> {
    if cfg!(target_family = "windows") {
        let Some(app_data) = env::var_os("APPDATA") else {
            return Err(Error::InitError(
                "Unable to resolve %APPDATA% environment variable".to_string(),
            ));
        };

        Ok(path::Path::new(&app_data)
            .join("gcloud")
            .join("application_default_credentials.json"))
    } else if cfg!(target_family = "unix") {
        Ok(home::home_dir()
            .ok_or(Error::InitError("Unable to get home directory".to_string()))?
            .join(".config")
            .join("gcloud")
            .join("application_default_credentials.json"))
    } else {
        // we don't support this target_family - just windows and unix
        unimplemented!("Unsupported target: unknown application_default_credentials.json location")
    }
}

impl TryFrom<&Compiler> for Credentials {
    type Error = Error;

    fn try_from(compiler: &Compiler) -> Result<Self> {
        let adc_path = adc_path()?;

        let creds_file = if let Some(creds) = &compiler.options.google_account_credentials {
            info!("Using credentials from --google-account-credentials flag");
            path::PathBuf::from(creds)
        } else if let Some(env_var) = env::var_os("GOOGLE_APPLICATION_CREDENTIALS") {
            info!("Using credentials from GOOGLE_APPLICATION_CREDENTIALS env var");
            path::PathBuf::from(env_var)
        } else if adc_path.exists() {
            info!("Using credentials from ADC path: {}", adc_path.display());
            adc_path
        } else {
            // TODO: more words in this error
            return Err(Error::GoogleSetupError(
                "Could not find any suitable Google app credentials".to_string(),
            ));
        };

        if !creds_file.exists() {
            return Err(Error::GoogleSetupError(format!(
                "Credentials file does not exist: {}",
                creds_file.display()
            )));
        }

        Ok(Self { file: creds_file })
    }
}

impl Credentials {
    pub(super) fn is_service_account(&self) -> Result<bool> {
        Ok(self.read_json()?["type"] == "service_account")
    }

    pub(super) fn is_authorized_user(&self) -> Result<bool> {
        Ok(self.read_json()?["type"] == "authorized_user")
    }

    pub fn read_json(&self) -> Result<serde_json::Value> {
        let json = fs::read_to_string(&self.file).map_err(|e| {
            Error::GoogleSetupError(format!("Unable to read credentials file: {e}"))
        })?;

        serde_json::from_str(&json).map_err(|e| {
            Error::GoogleSetupError(format!("Error parsing credentials file JSON: {e}"))
        })
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::test_utils::*;
    use std::env;

    #[test]
    fn is_authorized_user_true() {
        let test_file = TestFile::new("json", "{\"type\": \"authorized_user\"}");
        let creds = Credentials {
            file: test_file.path.clone(),
        };
        assert!(creds.is_authorized_user().unwrap());
    }

    #[test]
    fn is_authorized_user_false() {
        let test_file = TestFile::new("json", "{}");
        let creds = Credentials {
            file: test_file.path.clone(),
        };
        assert!(!creds.is_authorized_user().unwrap());
    }

    #[test]
    fn is_service_account_true() {
        let test_file = TestFile::new("json", "{\"type\": \"service_account\"}");
        let creds = Credentials {
            file: test_file.path.clone(),
        };
        assert!(creds.is_service_account().unwrap());
    }

    #[test]
    fn is_service_account_false() {
        let test_file = TestFile::new("json", "{}");
        let creds = Credentials {
            file: test_file.path.clone(),
        };
        assert!(!creds.is_service_account().unwrap());
    }

    #[test]
    #[ignore]
    fn try_from_default_location() {
        // hard to do this one because it checks ~/.config/gcloud/...
        todo!()
    }

    #[test]
    fn try_from_env_var() {
        let test_file = TestFile::new("json", "{\"type\": \"service_account\"}");
        env::set_var(
            "GOOGLE_APPLICATION_CREDENTIALS",
            test_file.path.to_string_lossy().to_string(),
        );
        let compiler = build_compiler();

        assert!(Credentials::try_from(&compiler).is_ok());
    }

    #[test]
    fn try_from_options() {
        let test_file = TestFile::new("json", "{\"type\": \"service_account\"}");
        let mut compiler = build_compiler();
        compiler.options.google_account_credentials = Some(
            test_file
                .path
                .clone()
                .into_os_string()
                .into_string()
                .unwrap(),
        );

        assert!(Credentials::try_from(&compiler).is_ok());
    }

    #[test]
    #[ignore]
    fn try_from_does_not_exist() {
        // hard to test this because it will always catch the default application creds locally
        todo!()
    }
}