using System.Net.Http.Headers;

namespace IOL.GreatOffice.Api.Endpoints.V1;

/// <inheritdoc />
[ApiVersion(ApiSpecV1.VERSION_STRING)]
[Authorize(AuthenticationSchemes = AuthSchemes)]
[ApiController]
public class BaseRoute : ControllerBase
{
	private const string AuthSchemes = CookieAuthenticationDefaults.AuthenticationScheme + "," + AppConstants.BASIC_AUTH_SCHEME;

	/// <summary>
	/// User data for the currently logged on user.
	/// </summary>
	protected LoggedInUserModel LoggedInUser => new() {
			Username = User.FindFirstValue(AppClaims.NAME),
			Id = User.FindFirstValue(AppClaims.USER_ID).AsGuid(),
	};

	protected bool IsApiCall() {
		if (!Request.Headers.ContainsKey("Authorization")) return false;
		try {
			var authHeader = AuthenticationHeaderValue.Parse(Request.Headers["Authorization"]);
			if (authHeader.Parameter == null) return false;
		} catch {
			return false;
		}

		return true;
	}

	protected bool HasApiPermission(string permission_key) {
		var permission_claim = User.Claims.SingleOrDefault(c => c.Type == permission_key);
		return permission_claim is {
				Value: "True"
		};
	}
}