// Copyright 2023-2026 Princess Beef Heavy Industries, LLC / Dave Shanley
// SPDX-License-Identifier: MIT

package responses

import (
	"bytes"
	"encoding/json"
	"fmt"
	"io"
	"net/http"
	"strconv"
	"strings"

	"github.com/pb33f/libopenapi/orderedmap"

	v3 "github.com/pb33f/libopenapi/datamodel/high/v3"

	"github.com/pb33f/libopenapi-validator/config"
	"github.com/pb33f/libopenapi-validator/errors"
	"github.com/pb33f/libopenapi-validator/helpers"
	"github.com/pb33f/libopenapi-validator/paths"
	"github.com/pb33f/libopenapi-validator/schema_validation"
)

func (v *responseBodyValidator) ValidateResponseBody(
	request *http.Request,
	response *http.Response,
) (bool, []*errors.ValidationError) {
	pathItem, errs, foundPath := paths.FindPath(request, v.document, v.options)
	if len(errs) > 0 {
		return false, errs
	}
	return v.ValidateResponseBodyWithPathItem(request, response, pathItem, foundPath)
}

func (v *responseBodyValidator) ValidateResponseBodyWithPathItem(request *http.Request, response *http.Response, pathItem *v3.PathItem, pathFound string) (bool, []*errors.ValidationError) {
	if pathItem == nil {
		return false, []*errors.ValidationError{{
			ValidationType:    helpers.PathValidation,
			ValidationSubType: helpers.ValidationMissing,
			Message:           fmt.Sprintf("%s Path '%s' not found", request.Method, request.URL.Path),
			Reason: fmt.Sprintf("The %s request contains a path of '%s' "+
				"however that path, or the %s method for that path does not exist in the specification",
				request.Method, request.URL.Path, request.Method),
			SpecLine: -1,
			SpecCol:  -1,
			HowToFix: errors.HowToFixPath,
		}}
	}
	var validationErrors []*errors.ValidationError
	operation := helpers.ExtractOperation(request, pathItem)
	if operation == nil {
		return false, []*errors.ValidationError{errors.OperationNotFound(pathItem, request, request.Method, pathFound)}
	}
	// extract the response code from the response
	httpCode := response.StatusCode
	contentType := response.Header.Get(helpers.ContentTypeHeader)
	codeStr := strconv.Itoa(httpCode)

	// extract the media type from the content type header.
	mediaTypeSting, _, _ := helpers.ExtractContentType(contentType)

	// check if operation has responses defined
	if operation.Responses == nil || operation.Responses.Codes == nil {
		return true, nil
	}

	// check if the response code is in the contract
	foundResponse := operation.Responses.Codes.GetOrZero(codeStr)
	if foundResponse == nil {
		// check range definition for response codes
		foundResponse = operation.Responses.Codes.GetOrZero(fmt.Sprintf("%dXX", httpCode/100))
		if foundResponse != nil {
			codeStr = fmt.Sprintf("%dXX", httpCode/100)
		}
	}

	if foundResponse != nil {
		if foundResponse.Content != nil { // only validate if we have content types.
			// check content type has been defined in the contract
			if mediaType, ok := foundResponse.Content.Get(mediaTypeSting); ok {
				validationErrors = append(validationErrors,
					v.checkResponseSchema(request, response, mediaTypeSting, mediaType)...)
			} else {
				// check that the operation *actually* returns a body. (i.e. a 204 response)
				if foundResponse.Content != nil && orderedmap.Len(foundResponse.Content) > 0 {
					// content type not found in the contract
					validationErrors = append(validationErrors,
						errors.ResponseContentTypeNotFound(operation, request, response, codeStr, false))
				}
			}
		}
	} else {
		// no code match, check for default response
		if operation.Responses.Default != nil && operation.Responses.Default.Content != nil {
			// check content type has been defined in the contract
			if mediaType, ok := operation.Responses.Default.Content.Get(mediaTypeSting); ok {
				foundResponse = operation.Responses.Default
				validationErrors = append(validationErrors,
					v.checkResponseSchema(request, response, contentType, mediaType)...)
			} else {
				// check that the operation *actually* returns a body. (i.e. a 204 response)
				if operation.Responses.Default.Content != nil && orderedmap.Len(operation.Responses.Default.Content) > 0 {
					// content type not found in the contract
					validationErrors = append(validationErrors,
						errors.ResponseContentTypeNotFound(operation, request, response, codeStr, true))
				}
			}
		} else {
			// TODO: add support for '2XX' and '3XX' responses in the contract
			// no default, no code match, nothing!
			validationErrors = append(validationErrors,
				errors.ResponseCodeNotFound(operation, request, httpCode))
		}
	}

	if foundResponse != nil {
		// check for headers in the response
		if foundResponse.Headers != nil {
			if ok, hErrs := ValidateResponseHeaders(request, response, foundResponse.Headers, pathFound, codeStr, config.WithExistingOpts(v.options)); !ok {
				validationErrors = append(validationErrors, hErrs...)
			}
		}
	}

	errors.PopulateValidationErrors(validationErrors, request, pathFound)

	if len(validationErrors) > 0 {
		return false, validationErrors
	}
	return true, nil
}

func (v *responseBodyValidator) checkResponseSchema(
	request *http.Request,
	response *http.Response,
	contentType string,
	mediaType *v3.MediaType,
) []*errors.ValidationError {
	var validationErrors []*errors.ValidationError

	if mediaType.Schema == nil {
		return validationErrors
	}

	// currently, we can only validate JSON, XML and URL Encoded based responses, so check for the presence
	// of 'json' (what ever it may be) and for XML/URLEncoded content type so we can perform a schema check on it.
	// anything other than JSON XML, or URL Encoded will be ignored.

	isXml := schema_validation.IsXMLContentType(contentType)
	isUrlEncoded := schema_validation.IsURLEncodedContentType(contentType)
	isJson := strings.Contains(strings.ToLower(contentType), helpers.JSONType)

	xmlValid := isXml && v.options.AllowXMLBodyValidation
	urlEncodedValid := isUrlEncoded && v.options.AllowURLEncodedBodyValidation

	if !isJson && !xmlValid && !urlEncodedValid {
		return validationErrors
	}

	schema := mediaType.Schema.Schema()

	if !isJson {
		if response != nil && response.Body != http.NoBody {
			responseBody, _ := io.ReadAll(response.Body)
			_ = response.Body.Close()

			stringedBody := string(responseBody)
			var jsonBody any
			var prevalidationErrors []*errors.ValidationError

			switch {
			case xmlValid:
				jsonBody, prevalidationErrors = schema_validation.TransformXMLToSchemaJSON(stringedBody, schema)
			case urlEncodedValid:
				jsonBody, prevalidationErrors = schema_validation.TransformURLEncodedToSchemaJSON(stringedBody, schema, mediaType.Encoding)
			}

			if len(prevalidationErrors) > 0 {
				return prevalidationErrors
			}

			transformedBytes, err := json.Marshal(jsonBody)
			if err != nil {
				switch {
				case isXml:
					return []*errors.ValidationError{errors.InvalidXMLParsing(err.Error(), stringedBody)}
				case isUrlEncoded:
					return []*errors.ValidationError{errors.InvalidURLEncodedParsing(err.Error(), stringedBody)}
				}
			}

			response.Body = io.NopCloser(bytes.NewBuffer(transformedBytes))
		}
	}

	// Validate response schema
	valid, vErrs := ValidateResponseSchema(&ValidateResponseSchemaInput{
		Request:  request,
		Response: response,
		Schema:   schema,
		Version:  helpers.VersionToFloat(v.document.Version),
		Options:  []config.Option{config.WithExistingOpts(v.options)},
	})

	if !valid {
		validationErrors = append(validationErrors, vErrs...)
	}

	return validationErrors
}