<?php
/**
 * Copyright since 2014 Waynet Sp. z o.o.
 * PrestaShop is an International Registered Trademark & Property of PrestaShop SA
 *
 * NOTICE OF LICENSE
 *
 * This source file is subject to the Open Software License (OSL 3.0)
 * that is bundled with this package in the file LICENSE.md.
 * It is also available through the world-wide-web at this URL:
 * https://opensource.org/licenses/OSL-3.0
 * If you did not receive a copy of the license and are unable to
 * obtain it through the world-wide-web, please send an email
 * to kontakt@waynet.pl so we can send you a copy immediately.
 *
 * DISCLAIMER
 *
 * Do not edit or add to this file if you wish to upgrade PrestaShop to newer
 * versions in the future. If you wish to customize PrestaShop for your
 * needs please refer to https://devdocs.prestashop-project.org/ for more information.
 *
 * @author    Waynet Sp. z o.o. <kontakt@waynet.pl>
 * @copyright since 2014 Waynet Sp. z o.o.
 * @license   https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
 */

declare(strict_types=1);

namespace Waynet\Security\Repository\Configuration;

use Waynet\OAuth2\Client\Token\AccessTokenInterface;
use Waynet\OAuth2\Client\Token\AccessTokenRepositoryInterface;
use Waynet\OAuth2\Client\Token\BearerToken;
use Waynet\Security\Exception\UnableToDecryptDataException;

class AccessTokenRepository extends ResettableConfigurationRepository implements AccessTokenRepositoryInterface
{
    private const ACCESS_TOKEN = 'WNET_SECURITY_API_ACCESS_TOKEN';
    private const ACCESS_TOKEN_EXPIRES_AT = 'WNET_SECURITY_API_ACCESS_TOKEN_EXPIRES_AT';

    public function getToken(): ?AccessTokenInterface
    {
        if (!$token = $this->getAccessToken()) {
            return null;
        }

        return new BearerToken(
            $token,
            $this->getAccessTokenExpiresAt()
        );
    }

    public function saveToken(AccessTokenInterface $accessToken): void
    {
        $this->runTransaction(function () use ($accessToken) {
            return $this->setAccessToken($accessToken->getToken())
                && $this->setAccessTokenExpiresAt($accessToken->getExpiresAt());
        });
    }

    public function deleteToken(): void
    {
        $this->runTransaction(function () {
            return $this->setAccessToken(null)
                && $this->setAccessTokenExpiresAt(null);
        });
    }

    /**
     * @throws UnableToDecryptDataException|\Exception
     */
    private function getAccessToken(): ?string
    {
        return $this->getEncrypted(self::ACCESS_TOKEN);
    }

    private function setAccessToken(?string $accessToken): bool
    {
        return $this->setEncrypted(self::ACCESS_TOKEN, $accessToken);
    }

    private function getAccessTokenExpiresAt(): ?int
    {
        if (!$timestamp = (int) $this->get(self::ACCESS_TOKEN_EXPIRES_AT)) {
            return null;
        }

        return $timestamp;
    }

    private function setAccessTokenExpiresAt(?int $expiresAt): bool
    {
        return $this->set(self::ACCESS_TOKEN_EXPIRES_AT, $expiresAt);
    }
}