/**
 * BladeX Commercial License Agreement
 * Copyright (c) 2018-2099, https://bladex.cn. All rights reserved.
 * <p>
 * Use of this software is governed by the Commercial License Agreement
 * obtained after purchasing a license from BladeX.
 * <p>
 * 1. This software is for development use only under a valid license
 * from BladeX.
 * <p>
 * 2. Redistribution of this software's source code to any third party
 * without a commercial license is strictly prohibited.
 * <p>
 * 3. Licensees may copyright their own code but cannot use segments
 * from this software for such purposes. Copyright of this software
 * remains with BladeX.
 * <p>
 * Using this software signifies agreement to this License, and the software
 * must not be used for illegal purposes.
 * <p>
 * THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY. The author is
 * not liable for any claims arising from secondary or illegal development.
 * <p>
 * Author: Chill Zhuang (bladejava@qq.com)
 */
package org.springblade.auth.endpoint;

import io.swagger.v3.oas.annotations.Operation;
import io.swagger.v3.oas.annotations.tags.Tag;
import jakarta.servlet.http.HttpServletRequest;
import lombok.AllArgsConstructor;
import org.springblade.core.oauth2.endpoint.OAuth2TokenEndPoint;
import org.springblade.core.oauth2.provider.OAuth2Response;
import org.springblade.core.tool.support.Kv;
import org.springblade.core.tool.utils.StringUtil;
import org.springframework.http.ResponseEntity;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RestController;

/**
 * IAM统一身份认证端点
 *
 * @author Chill
 */
@RestController
@AllArgsConstructor
@RequestMapping("/iam/sso")
@Tag(name = "IAM统一身份认证", description = "IAM统一身份认证端点")
public class IamSsoEndpoint {

	private static final String GRANT_TYPE = "iam_sso";

	private final OAuth2TokenEndPoint tokenEndPoint;

	/**
	 * IAM统一身份认证登录
	 *
	 * @param request 请求信息
	 * @return token
	 */
	@RequestMapping(value = "/token", method = {RequestMethod.GET, RequestMethod.POST})
	@Operation(summary = "IAM统一身份认证登录", description = "使用IAM授权码换取本系统Token")
	public ResponseEntity<Kv> token(HttpServletRequest request) {
		String grantType = request.getParameter("grant_type");
		if (!StringUtil.equals(GRANT_TYPE, grantType)) {
			return ResponseEntity.ok(
				OAuth2Response.create().ofFailure(400, "IAM统一身份认证接口仅支持iam_sso授权类型")
			);
		}
		if (StringUtil.isBlank(request.getParameter("code"))) {
			return ResponseEntity.ok(
				OAuth2Response.create().ofFailure(400, "IAM统一身份认证授权码不能为空")
			);
		}
		return tokenEndPoint.token();
	}

}
