# frozen_string_literal: true


# 1/ check if ENV key exist then validate and set
# 2/ if no check in credentials then validate and set
# 3/ if no generate display warning, raise error in production, and set

require 'barong/app'
require 'barong/keystore'
require 'barong/string'

private_key_path = ENV['JWT_PRIVATE_KEY_PATH']

if !private_key_path.nil?
  pkey = Barong::KeyStore.open!(private_key_path)
  Rails.logger.error('Loading private key from: ' + private_key_path)

elsif Rails.application.credentials.has?(:private_key)
  pkey = Barong::KeyStore.read!(Rails.application.credentials.private_key)
  Rails.logger.info('Loading private key from credentials.yml.enc')

elsif !Rails.env.production?
  # Generates private key
  key = Barong::KeyStore.generate
  pkey = key.to_pem
  pub_key = key.public_key.to_pem

  # Save private/public keys
  Barong::KeyStore.save!(pkey, 'config/rsa-key')
  Barong::KeyStore.save!(pub_key, 'config/rsa-key.pub')

  Rails.logger.warn('Warning !! Generating private key')
else
  raise 'Private key not found or invalid'
end

kstore = Barong::KeyStore.new(pkey)

# Define default value for secret_key_base in test and development mode
ENV['SECRET_KEY_BASE'] = '' unless Rails.env.production?

Barong::App.define do |config|
  # General configuration ---------------------------------------------
  # https://www.openware.com/sdk/docs/barong/configuration.html#general-configuration
  config.set(:app_name, 'Fibitex')
  config.set(:domain, 'fibitex.com')
  config.set(:uid_prefix, 'ID', regex: /^[A-z]{2,6}$/)
  config.set(:session_name, '_dalan_session')
  config.set(:session_expire_time, '1800', type: :integer)
  config.set(:kyc_provider, 'kycaid', values: %w[kycaid local])
  config.set(:required_docs_expire, 'false', type: :bool)
  config.set(:doc_num_limit, '10', type: :integer)
  config.set(:geoip_lang, 'en', values: %w[en de es fr ja ru])
  config.set(:csrf_protection, 'true', type: :bool)
  config.set(:apikey_nonce_lifetime, '50000', type: :integer)
  config.set(:gateway, 'cloudflare', values: %w[akamai cloudflare])
  config.set(:jwt_expire_time, '3600', type: :integer)
  config.set(:profile_double_verification, 'false', type: :bool)
  config.set(:crc32_salt, '')
  config.set(:api_data_masking_enabled, 'true', type: :bool)
  config.set(:first_registration_superadmin, 'true', type: :bool)
  config.set(:mgn_api_keys_user, 'false', type: :bool)
  config.set(:mgn_api_keys_sa, 'false', type: :bool)


  # Password configuration  -----------------------------------------------
  # https://www.openware.com/sdk/docs/barong/configuration.html#password-configuration
  config.set(:password_regexp, '^(?=.*[[:lower:]])(?=.*[[:upper:]])(?=.*[[:digit:]])(?=.*[[:graph:]]).{8,80}$', type: :regexp)
  config.set(:password_min_entropy, '14', type: :integer)
  config.set(:password_use_dictionary, 'true', type: :bool)

  # CAPTCHA configuration ---------------------------------------------
  # https://www.openware.com/sdk/docs/barong/configuration.html#captcha-configuration
  config.set(:captcha, 'none', values: %w[none recaptcha geetest])
  config.set(:geetest_id, '')
  config.set(:geetest_key, '')
  config.set(:recaptcha_site_key, '')
  config.set(:recaptcha_secret_key, '')

  # Dependencies configuration (vault, redis, rabbitmq) ---------------
  # https://www.openware.com/sdk/docs/barong/configuration.html#dependencies-configuration-vault-redis-rabbitmq
  config.set(:event_api_rabbitmq_host, 'localhost')
  config.set(:event_api_rabbitmq_port, '5672')
  config.set(:event_api_rabbitmq_username, 'guest')
  config.set(:event_api_rabbitmq_password, 'guest')
  config.set(:vault_address, 'http://localhost:8200')
  config.set(:vault_token, '')
  config.set(:redis_cluster, 'false', type: :bool)
  config.set(:redis_url, 'redis://localhost:6379/1')
  config.set(:redis_password, '')
  config.set(:vault_app_name, 'barong')

  # CORS configuration  -----------------------------------------------
  # https://www.openware.com/sdk/docs/barong/configuration.html#api-cors-configuration
  config.set(:api_cors_origins, '*')
  config.set(:api_cors_max_age, '3600')
  config.set(:api_cors_allow_credentials, 'false', type: :bool)

  # Config files configuration ----------------------------------------
  # https://www.openware.com/sdk/docs/barong/configuration.html#config-files-configuration
  config.set(:config, 'config/barong.yml', type: :path)
  config.set(:maxminddb_path, 'geolite/GeoLite2-Country.mmdb', type: :path)
  config.set(:seeds_file, Rails.root.join('config', 'seeds.yml'), type: :path)
  config.set(:authz_rules_file, Rails.root.join('config', 'authz_rules.yml'), type: :path)

  # SMTP configuration ------------------------------------------------
  # https://github.com/openware/barong/blob/master/docs/general/env_configuration.md#smtp-configuration
  config.set(:sender_email, 'noreply@barong.io')
  config.set(:sender_name, 'Barong')
  config.set(:smtp_password, '')
  config.set(:smtp_port, 1025)
  config.set(:smtp_host, 'localhost')
  config.set(:smtp_user, '')
  config.set(:smtp_logo_link, 'https://storage.cloud.google.com/public_peatio/logo.png')
  config.set(:default_language, 'en')
  config.set(:smtp_domain, 'test.com')
  config.set(:smtp_enable_starttls_auto, 'true', type: :bool)
  config.set(:smtp_openssl_verify_mode, 'peer')
  config.set(:smtp_auth, 'plain')

  # KYCAID ------------------------------------------------------------
  config.set(:kycaid_authorization_token, '')
  config.set(:kycaid_sandbox_mode, 'true', type: :bool)
  config.set(:kycaid_api_endpoint, 'https://api.kycaid.com/')

  # Auth0 configuration -----------------------------------------------
  config.set(:auth0_domain, '')
  config.set(:auth0_client_id, '')

  # jibit configuration ----------------------------------------
  config.set(:jibit_api_url, '')
  config.set(:jibit_api_key, '')
  config.set(:jibit_api_secret, '')
end

# KYCAID configuring
KYCAID.configure do |config|
  config.authorization_token = Barong::App.config.kycaid_authorization_token
  config.sandbox_mode = Barong::App.config.kycaid_sandbox_mode
  config.api_endpoint = Barong::App.config.kycaid_api_endpoint
end

ActionMailer::Base.smtp_settings = {
  address: Barong::App.config.smtp_host,
  port: Barong::App.config.smtp_port,
  user_name: Barong::App.config.smtp_user,
  authentication: Barong::App.config.smtp_auth,
  domain: Barong::App.config.smtp_domain,
  enable_starttls_auto: Barong::App.config.smtp_enable_starttls_auto,
  openssl_verify_mode: Barong::App.config.smtp_openssl_verify_mode,
  password: Barong::App.config.smtp_password
}

Barong::GeoIP.lang = Barong::App.config.geoip_lang

Rails.application.config.x.keystore = kstore
Barong::App.config.keystore = kstore