var __assign = (this && this.__assign) || function () {
    __assign = Object.assign || function(t) {
        for (var s, i = 1, n = arguments.length; i < n; i++) {
            s = arguments[i];
            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
                t[p] = s[p];
        }
        return t;
    };
    return __assign.apply(this, arguments);
};
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
var __generator = (this && this.__generator) || function (thisArg, body) {
    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
    function verb(n) { return function (v) { return step([n, v]); }; }
    function step(op) {
        if (f) throw new TypeError("Generator is already executing.");
        while (_) try {
            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
            if (y = 0, t) op = [op[0] & 2, t.value];
            switch (op[0]) {
                case 0: case 1: t = op; break;
                case 4: _.label++; return { value: op[1], done: false };
                case 5: _.label++; y = op[1]; op = [0]; continue;
                case 7: op = _.ops.pop(); _.trys.pop(); continue;
                default:
                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
                    if (t[2]) _.ops.pop();
                    _.trys.pop(); continue;
            }
            op = body.call(thisArg, _);
        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
    }
};
import '@iotize/tap/service/impl/group';
import { isCodeError } from '@iotize/common/error';
import { TapError } from '@iotize/tap';
import { ResultCode } from '@iotize/tap/client/api';
import { BehaviorSubject } from 'rxjs';
import { BasicAuth } from './basic-auth';
import { INITIAL_SESSION_STATE } from './config';
import { debug } from './debug';
import { ScramAuth } from './scram-auth';
import { TapAuthError } from './tap-auth-error';
var TAG = 'TapAuth';
var TapAuth = /** @class */ (function () {
    function TapAuth(tap) {
        this.tap = tap;
        this._sessionState = new BehaviorSubject(INITIAL_SESSION_STATE);
        this._sessionData = new BehaviorSubject({});
    }
    Object.defineProperty(TapAuth.prototype, "sessionStateSnapshot", {
        /**
         * Get current session state snapshot
         */
        get: function () {
            return this._sessionState.value;
        },
        enumerable: true,
        configurable: true
    });
    Object.defineProperty(TapAuth.prototype, "sessionState", {
        /**
         * Listen to session state changed
         */
        get: function () {
            return this._sessionState.asObservable();
        },
        enumerable: true,
        configurable: true
    });
    Object.defineProperty(TapAuth.prototype, "sessionDataSnapshot", {
        /**
         * Get current session data snapshot
         */
        get: function () {
            return this._sessionData.value;
        },
        enumerable: true,
        configurable: true
    });
    Object.defineProperty(TapAuth.prototype, "sessionData", {
        /**
         * Listen to session data changed
         */
        get: function () {
            return this._sessionData.asObservable();
        },
        enumerable: true,
        configurable: true
    });
    Object.defineProperty(TapAuth.prototype, "service", {
        get: function () {
            return this.tap.service;
        },
        enumerable: true,
        configurable: true
    });
    TapAuth.prototype.setAuthMethod = function (method) {
        this._auth = method;
    };
    /**
     * Clear auth cache.
     * Usefull for example if Tap configuration has changed
     */
    TapAuth.prototype.clearCache = function () {
        this._auth = undefined;
    };
    // async test() {
    //     const lockInfo = await this.getLockInfo();
    //     if (userPassword) {
    //         if (currentUserId === undefined) {
    //             currentUserId = (await this.service.interface.getCurrentGroupId()).body();
    //         }
    //         const currentUsername = (await this.tap.service.group.getName(
    //             currentUserId!
    //         )).body()!;
    //         await this.login(currentUsername, userPassword, false);
    //     }
    // }
    TapAuth.prototype.login = function (params, options) {
        return __awaiter(this, void 0, void 0, function () {
            var auth, sessionData, event_1, err_1;
            return __generator(this, function (_a) {
                switch (_a.label) {
                    case 0:
                        debug(TAG, "Tap login as " + params.username + "...");
                        return [4 /*yield*/, this.setupTapAuthEngineIfRequired()];
                    case 1:
                        auth = _a.sent();
                        _a.label = 2;
                    case 2:
                        _a.trys.push([2, 6, , 7]);
                        return [4 /*yield*/, auth.login(params)];
                    case 3:
                        sessionData = _a.sent();
                        if (sessionData && sessionData.key) {
                            this.tap.encryption.sessionKey = sessionData.key;
                            this.tap.encryption.resume();
                        }
                        this._sessionData.next(sessionData);
                        if (!!(options === null || options === void 0 ? void 0 : options.noRefreshSessionState)) return [3 /*break*/, 5];
                        return [4 /*yield*/, this.refreshSessionState({
                                username: params.username
                            })];
                    case 4:
                        _a.sent();
                        _a.label = 5;
                    case 5:
                        event_1 = {
                            type: 'tap-login'
                        };
                        this.tap.notifyEvent(event_1);
                        return [2 /*return*/, sessionData];
                    case 6:
                        err_1 = _a.sent();
                        if (isCodeError(TapError.Code.ResponseStatusError, err_1)) {
                            if (err_1.response.status === ResultCode.NOT_ACCEPTABLE ||
                                err_1.response.status === ResultCode.UNAUTHORIZED) {
                                throw TapAuthError.invalidCredentialsError(params, err_1);
                            }
                            else if (err_1.response.status === ResultCode.SERVICE_UNAVAILABLE) {
                                throw TapAuthError.tooManyLoginFailedError(params, err_1);
                            }
                        }
                        throw TapAuthError.tapRequestError(params, err_1);
                    case 7: return [2 /*return*/];
                }
            });
        });
    };
    /**
     * Tap logout
     * Reject if logout failed
     */
    TapAuth.prototype.logout = function () {
        return __awaiter(this, void 0, void 0, function () {
            var auth, event;
            return __generator(this, function (_a) {
                switch (_a.label) {
                    case 0:
                        debug(TAG, "Tap logout...");
                        return [4 /*yield*/, this.setupTapAuthEngineIfRequired()];
                    case 1:
                        auth = _a.sent();
                        return [4 /*yield*/, auth.logout()];
                    case 2:
                        _a.sent();
                        // we keep session keys even after logout
                        this._sessionState.next(INITIAL_SESSION_STATE);
                        this._sessionData.next({});
                        event = {
                            type: 'tap-logout'
                        };
                        this.tap.notifyEvent(event);
                        return [2 /*return*/];
                }
            });
        });
    };
    /**
     * Read session state from the Tap
     * This will perform a few tap requests
     *
     * TODO we should invalidate encryption key if session state changed
     * TODO we should use multi commands to improve performance
     */
    TapAuth.prototype.refreshSessionState = function (defaults) {
        return __awaiter(this, void 0, void 0, function () {
            var groupId, currentSessionState, _a, _b, _c;
            return __generator(this, function (_d) {
                switch (_d.label) {
                    case 0:
                        debug(TAG, '[TAP]', "Refreshing session state (current=" + this.sessionStateSnapshot.name + ")...");
                        return [4 /*yield*/, this.service.interface.getCurrentGroupId()];
                    case 1:
                        groupId = (_d.sent()).body();
                        if (!(groupId !== this.sessionStateSnapshot.groupId)) return [3 /*break*/, 5];
                        currentSessionState = __assign({}, this.sessionStateSnapshot);
                        currentSessionState.groupId = groupId;
                        _a = currentSessionState;
                        _b = (defaults === null || defaults === void 0 ? void 0 : defaults.username);
                        if (_b) return [3 /*break*/, 3];
                        return [4 /*yield*/, this.service.group.getName(groupId)];
                    case 2:
                        _b = (_d.sent()).body();
                        _d.label = 3;
                    case 3:
                        _a.name = _b;
                        _c = currentSessionState;
                        return [4 /*yield*/, this.service.group.getSessionLifetime(groupId)];
                    case 4:
                        _c.lifeTime = (_d.sent()).body();
                        debug(TAG, '[TAP]', "Notifying new session state: " + currentSessionState.name);
                        this._sessionState.next(currentSessionState);
                        return [3 /*break*/, 6];
                    case 5:
                        debug(TAG, '[TAP]', "Session state did not changed: " + this.sessionStateSnapshot.name + " (id=" + groupId + ")");
                        _d.label = 6;
                    case 6: return [2 /*return*/, this.sessionStateSnapshot];
                }
            });
        });
    };
    // private _isLoggedIn(): boolean {
    //     return (
    //         this.sessionStateSnapshot != undefined &&
    //         this.sessionStateSnapshot.name !==
    //         INITIAL_SESSION_STATE.name
    //     );
    // }
    /**
     * Change password for given user. If userIdOrName is not set, it will change password for the currenty
     * connected user.
     * @param newPassword
     * @param userIdOrUndefined user identifier for which password will be change
     */
    TapAuth.prototype.changePassword = function (newPassword, userIdOrUndefined) {
        return __awaiter(this, void 0, void 0, function () {
            var userId, username, auth, event;
            return __generator(this, function (_a) {
                switch (_a.label) {
                    case 0:
                        if (!(userIdOrUndefined === undefined)) return [3 /*break*/, 3];
                        return [4 /*yield*/, this.service.interface.getCurrentGroupId()];
                    case 1:
                        userId = (_a.sent()).body();
                        return [4 /*yield*/, this.service.group.getName(userId)];
                    case 2:
                        username = (_a.sent()).body();
                        return [3 /*break*/, 5];
                    case 3:
                        // TODO for now we cannot get the user id from the username 
                        // if (typeof userIdOrName === "string") {
                        //     username = userIdOrName;
                        //     userId = (await this.service.group.getUserIdFromName(username)).body();
                        // }
                        // else {
                        userId = userIdOrUndefined;
                        return [4 /*yield*/, this.service.group.getName(userId)];
                    case 4:
                        username = (_a.sent()).body();
                        _a.label = 5;
                    case 5: return [4 /*yield*/, this.setupTapAuthEngineIfRequired()];
                    case 6:
                        auth = _a.sent();
                        return [4 /*yield*/, auth.changePassword(newPassword, userId)];
                    case 7:
                        _a.sent();
                        event = {
                            type: 'tap-user-password-change',
                            user: {
                                id: userId,
                                username: username
                            }
                        };
                        this.tap.notifyEvent(event);
                        return [2 /*return*/];
                }
            });
        });
    };
    TapAuth.prototype.setupTapAuthEngineIfRequired = function () {
        return __awaiter(this, void 0, void 0, function () {
            var _a;
            return __generator(this, function (_b) {
                switch (_b.label) {
                    case 0:
                        if (!!this._auth) return [3 /*break*/, 2];
                        _a = this;
                        return [4 /*yield*/, this.setupTapAuthEngine()];
                    case 1:
                        _a._auth = _b.sent();
                        _b.label = 2;
                    case 2: return [2 /*return*/, this._auth];
                }
            });
        });
    };
    TapAuth.prototype.setupTapAuthEngine = function () {
        return __awaiter(this, void 0, void 0, function () {
            var securityOptions;
            return __generator(this, function (_a) {
                switch (_a.label) {
                    case 0: return [4 /*yield*/, this.service.interface.getSecurityOptions()];
                    case 1:
                        securityOptions = (_a.sent()).body();
                        debug(TAG, "securityOptions " + JSON.stringify(securityOptions));
                        if (securityOptions.scramActivated) {
                            debug(TAG, 'Setup with ScramAuth');
                            return [2 /*return*/, new ScramAuth(this.tap)];
                        }
                        else {
                            debug(TAG, 'Setup with BasicAuth');
                            return [2 /*return*/, new BasicAuth(this.tap, {
                                    hashPassword: securityOptions.hashPassword
                                })];
                        }
                        return [2 /*return*/];
                }
            });
        });
    };
    return TapAuth;
}());
export { TapAuth };
//# sourceMappingURL=data:application/json;base64, 