<?php

/**
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * as published by the Free Software Foundation; under version 2
 * of the License (non-upgradable).
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
 *
 * Copyright (c) 2020 (original work) Open Assessment Technologies SA;
 */

declare(strict_types=1);

namespace OAT\Bundle\Lti1p3Bundle\Action\Tool\Message;

use Throwable;
use OAT\Library\Lti1p3Core\Exception\LtiExceptionInterface;
use OAT\Library\Lti1p3Core\Security\Oidc\OidcInitiator;
use Psr\Log\LoggerInterface;
use Symfony\Bridge\PsrHttpMessage\HttpMessageFactoryInterface;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;

class OidcInitiationAction
{
    /** @var HttpMessageFactoryInterface */
    private $factory;

    /** @var OidcInitiator */
    private $initiator;

    /** @var LoggerInterface */
    private $logger;

    public function __construct(
        HttpMessageFactoryInterface $factory,
        OidcInitiator $initiator,
        LoggerInterface $logger
    ) {
        $this->factory = $factory;
        $this->initiator = $initiator;
        $this->logger = $logger;
    }

    public function __invoke(Request $request): Response
    {
        try {
            $oidcAuthenticationRequest = $this->initiator->initiate($this->factory->createRequest($request));

            $this->logger->info('OidcInitiationAction: initiation success');

            return new RedirectResponse($oidcAuthenticationRequest->toUrl());

        } catch (LtiExceptionInterface $exception) {
            $this->logger->error(sprintf('OidcInitiationAction: %s', $exception->getMessage()));

            return new Response(
                $this->convertThrowableMessageToHtml($exception),
                Response::HTTP_BAD_REQUEST
            );
        }
    }

    private function convertThrowableMessageToHtml(Throwable $throwable): string
    {
        return htmlspecialchars($throwable->getMessage(), ENT_QUOTES);
    }
}