use crate::{Entity, Identity, SecureChannelTrustInfo, TrustPolicy};
use ockam_core::compat::string::String;
use ockam_core::vault::PublicKey;
use ockam_core::{async_trait, compat::boxed::Box};
use ockam_core::{AsyncTryClone, Result};

#[derive(AsyncTryClone)]
pub struct TrustPublicKeyPolicy {
    public_key: PublicKey,
    public_key_label: String,
    entity: Entity,
}

impl TrustPublicKeyPolicy {
    pub fn new(public_key: PublicKey, public_key_label: impl Into<String>, entity: Entity) -> Self {
        Self {
            public_key,
            public_key_label: public_key_label.into(),
            entity,
        }
    }
}

#[async_trait]
impl TrustPolicy for TrustPublicKeyPolicy {
    async fn check(&mut self, trust_info: &SecureChannelTrustInfo) -> Result<bool> {
        let contact;
        if let Some(c) = self
            .entity
            .get_contact(trust_info.their_profile_id())
            .await?
        {
            contact = c;
        } else {
            return Ok(false);
        }

        if let Ok(pub_key) = contact.get_public_key(&self.public_key_label) {
            Ok(pub_key == self.public_key)
        } else {
            Ok(false)
        }
    }
}