<?php

namespace Pterodactyl\Services\Nodes;

use DateTimeImmutable;
use Lcobucci\JWT\Builder;
use Carbon\CarbonImmutable;
use Illuminate\Support\Str;
use Lcobucci\JWT\Signer\Key;
use Pterodactyl\Models\Node;
use Lcobucci\JWT\Signer\Hmac\Sha256;

class NodeJWTService
{
    /**
     * @var array
     */
    private $claims = [];

    /**
     * @var \DateTimeImmutable|null
     */
    private $expiresAt;

    /**
     * @var string|null
     */
    private $subject;

    /**
     * Set the claims to include in this JWT.
     *
     * @param array $claims
     * @return $this
     */
    public function setClaims(array $claims)
    {
        $this->claims = $claims;

        return $this;
    }

    /**
     * @param \DateTimeImmutable $date
     * @return $this
     */
    public function setExpiresAt(DateTimeImmutable $date)
    {
        $this->expiresAt = $date;

        return $this;
    }

    /**
     * @param string $subject
     * @return $this
     */
    public function setSubject(string $subject)
    {
        $this->subject = $subject;

        return $this;
    }

    /**
     * Generate a new JWT for a given node.
     *
     * @param \Pterodactyl\Models\Node $node
     * @param string|null $identifiedBy
     * @param string $algo
     * @return \Lcobucci\JWT\Token
     */
    public function handle(Node $node, string $identifiedBy, string $algo = 'md5')
    {
        $signer = new Sha256;

        $identifier = hash($algo, $identifiedBy);

        $builder = (new Builder)->issuedBy(config('app.url'))
            ->permittedFor($node->getConnectionAddress())
            ->identifiedBy($identifier)
            ->withHeader('jti', $identifier)
            ->issuedAt(CarbonImmutable::now()->toDateTimeImmutable())
            ->canOnlyBeUsedAfter(CarbonImmutable::now()->subMinutes(5)->toDateTimeImmutable());

        if ($this->expiresAt) {
            $builder = $builder->expiresAt($this->expiresAt);
        }

        if (! empty($this->subject)) {
            $builder = $builder->relatedTo($this->subject)
                ->withHeader('sub', $this->subject);
        }

        foreach ($this->claims as $key => $value) {
            $builder = $builder->withClaim($key, $value);
        }

        return $builder
            ->withClaim('unique_id', Str::random(16))
            ->getToken($signer, new Key($node->getDecryptedKey()));
    }
}