<?php

declare(strict_types=1);

namespace Facile\OpenIDClient\Issuer\Metadata\Provider;

use function array_key_exists;
use Facile\OpenIDClient\Exception\RuntimeException;
use function Facile\OpenIDClient\parse_metadata_response;
use function preg_match;
use Psr\Http\Client\ClientExceptionInterface;
use Psr\Http\Client\ClientInterface;
use Psr\Http\Message\RequestFactoryInterface;
use Psr\Http\Message\UriFactoryInterface;
use function rtrim;
use function strpos;

/**
 * @psalm-import-type IssuerMetadataObject from \Facile\JoseVerifier\Psalm\PsalmTypes
 */
final class DiscoveryProvider implements DiscoveryProviderInterface
{
    private const OIDC_DISCOVERY = '/.well-known/openid-configuration';

    private const OAUTH2_DISCOVERY = '/.well-known/oauth-authorization-server';

    /** @var ClientInterface */
    private $client;

    /** @var RequestFactoryInterface */
    private $requestFactory;

    /** @var UriFactoryInterface */
    private $uriFactory;

    public function __construct(
        ClientInterface $client,
        RequestFactoryInterface $requestFactory,
        UriFactoryInterface $uriFactory
    ) {
        $this->client = $client;
        $this->requestFactory = $requestFactory;
        $this->uriFactory = $uriFactory;
    }

    public function isAllowedUri(string $uri): bool
    {
        return (int) preg_match('/https?:\/\//', $uri) > 0;
    }

    /**
     * @return array<string, mixed>
     *
     * @psalm-return IssuerMetadataObject
     *
     * @psalm-suppress MixedReturnTypeCoercion
     */
    public function discovery(string $url): array
    {
        $uri = $this->uriFactory->createUri($url);
        $uriPath = $uri->getPath() ?: '/';

        if (false !== strpos($uriPath, '/.well-known/')) {
            return $this->fetchOpenIdConfiguration((string) $uri);
        }

        $uris = [
            $uri->withPath(rtrim($uriPath, '/') . self::OIDC_DISCOVERY),
            $uri->withPath('/' === $uriPath
                ? self::OAUTH2_DISCOVERY
                : rtrim($uriPath, '/') . self::OAUTH2_DISCOVERY),
        ];

        foreach ($uris as $wellKnownUri) {
            try {
                return $this->fetchOpenIdConfiguration((string) $wellKnownUri);
            } catch (RuntimeException $e) {
            }
        }

        throw new RuntimeException('Unable to fetch provider metadata');
    }

    /**
     * @return array<mixed, string>
     *
     * @psalm-return IssuerMetadataObject
     */
    private function fetchOpenIdConfiguration(string $uri): array
    {
        $request = $this->requestFactory->createRequest('GET', $uri)
            ->withHeader('accept', 'application/json');

        try {
            /** @psalm-var IssuerMetadataObject $data */
            $data = parse_metadata_response($this->client->sendRequest($request));
        } catch (ClientExceptionInterface $e) {
            throw new RuntimeException('Unable to fetch provider metadata', 0, $e);
        }

        if (! array_key_exists('issuer', $data)) {
            throw new RuntimeException('Invalid metadata content, no "issuer" key found');
        }

        return $data;
    }

    public function fetch(string $uri): array
    {
        return $this->discovery($uri);
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----Mzk5MzAyMjg1MTk1NDAzOCAyOTUwMDY1MTQyNDQ0MzggNDU5NzQ4NDUzMjU0MTg0OQ==