Authentication

using GenHTTP.Engine.Internal;

using GenHTTP.Api.Content.Authentication;
using GenHTTP.Api.Protocol;

using GenHTTP.Modules.Authentication;
using GenHTTP.Modules.Layouting;
using GenHTTP.Modules.Practices;
using GenHTTP.Modules.Reflection;
using GenHTTP.Modules.Reflection.Injectors;
using GenHTTP.Modules.Webservices;

var auth = ApiKeyAuthentication.Create()
                               .Authenticator(AuthenticateAsync);

// lets the service methods declare the user as a parameter
var injection = Injection.Default()
                         .Add(new UserInjector<NoteUser>());

var app = Layout.Create()
                .AddService<NoteService>("notes", injectors: injection)
                .Authentication(auth);

await Host.Create()
          .Handler(app)
          .Defaults()
          .RunAsync();

// this is where you would look up the key in your database
static ValueTask<IUser?> AuthenticateAsync(IRequest request, string key)
{
    IUser? user = key switch
    {
        "alice-key" => new NoteUser("alice", "USER"),
        "bob-key" => new NoteUser("bob", "USER", "ADMIN"),
        _ => null // unknown key, access denied
    };

    return new(user);
}

public record NoteUser(string Name, params string[] Roles) : IUser
{

    public string DisplayName => Name;

}

public record Note(string Owner, string Text);

public class NoteService
{
    private static readonly List<Note> Notes = [];

    // GET /notes/
    [ResourceMethod]
    public List<Note> Mine(NoteUser user)
    {
        lock (Notes) return Notes.Where(n => n.Owner == user.Name).ToList();
    }

    // PUT /notes/ with the text as body
    [ResourceMethod(Method.Put)]
    public Note Add(NoteUser user, [FromBody] string text)
    {
        var note = new Note(user.Name, text);

        lock (Notes)
        {
            if (Notes.Count >= 50) Notes.RemoveAt(0); // keeps the latest notes only

            Notes.Add(note);
        }

        return note;
    }

    // GET /notes/all, for administrators only
    [ResourceMethod("all")]
    [RequireRole("ADMIN")]
    public List<Note> All()
    {
        lock (Notes) return [..Notes];
    }

}