/*
 * Copyright 2020 Signal Messenger, LLC
 * SPDX-License-Identifier: AGPL-3.0-only
 */

package org.signal.storageservice.s3;

import org.apache.commons.codec.binary.Base64;
import org.signal.storageservice.util.Pair;

import java.nio.charset.StandardCharsets;
import java.time.ZonedDateTime;
import java.time.format.DateTimeFormatter;

public class PostPolicyGenerator {

  public  static final DateTimeFormatter AWS_DATE_TIME   = DateTimeFormatter.ofPattern("yyyyMMdd'T'HHmmssX");
  private static final DateTimeFormatter CREDENTIAL_DATE = DateTimeFormatter.ofPattern("yyyyMMdd"          );

  private final String region;
  private final String bucket;
  private final String awsAccessId;

  public PostPolicyGenerator(String region, String bucket, String awsAccessId) {
    this.region      = region;
    this.bucket      = bucket;
    this.awsAccessId = awsAccessId;
  }

  public Pair<String, String> createFor(ZonedDateTime now, String object, int maxSizeInBytes) {
    String expiration     = now.plusMinutes(30).format(DateTimeFormatter.ISO_INSTANT);
    String credentialDate = now.format(CREDENTIAL_DATE);
    String requestDate    = now.format(AWS_DATE_TIME  );
    String credential     = String.format("%s/%s/%s/s3/aws4_request", awsAccessId, credentialDate, region);

    String policy = String.format("{ \"expiration\": \"%s\",\n" +
                                      "  \"conditions\": [\n" +
                                      "    {\"bucket\": \"%s\"},\n" +
                                      "    {\"key\": \"%s\"},\n" +
                                      "    {\"acl\": \"private\"},\n" +
                                      "    [\"starts-with\", \"$Content-Type\", \"\"],\n" +
                                      "    [\"content-length-range\", 1, " + maxSizeInBytes + "],\n" +
                                      "\n" +
                                      "    {\"x-amz-credential\": \"%s\"},\n" +
                                      "    {\"x-amz-algorithm\": \"AWS4-HMAC-SHA256\"},\n" +
                                      "    {\"x-amz-date\": \"%s\" }\n" +
                                      "  ]\n" +
                                      "}", expiration, bucket, object, credential, requestDate);

    return new Pair<>(credential, Base64.encodeBase64String(policy.getBytes(StandardCharsets.UTF_8)));
  }

}