server.rb

# frozen_string_literal: true

require 'logger'
require_relative 'management'

class Api < Sinatra::Base
  include JwtHelper

  configure do
    logger = Logger.new($stdout)
    logger.level = Logger::INFO if production?
    set :logger, logger
    enable :logging
  end

  register Sinatra::CrossOrigin
  use JwtAuth
  attr_accessor :params

  before do
    cross_origin
    body = request.body.read
    @params = JSON.parse(body) unless body == ''
  end

  # region products
  post '/products' do
    process_request request, 'products' do |_req, username|
      positions = User[email: username].product_position
      diff_array = []
      products = Product.all.map(&:values)
      products.delete_if do |element|
        index = positions.index(element[:id])
        if index
          diff_array[index] = element
        else
          false
        end
      end
      { products: (diff_array + products).compact }.to_json
    end
  end

  post '/product' do
    process_request request, 'product' do |_req, _username|
      { product: Product[id: params['product_data']['id']].values }.to_json
    end
  end

  post '/product_new' do
    process_request request, 'product_new' do |_req, _username|
      if params['product_data'].nil?
        { product_errors: ['product_data not found'] }.to_json
      elsif params['product_data']['name'].nil?
        { product_errors: ['name of product_data not found'] }.to_json
      else
        product = Product.create_new(params['product_data']['name'])
        if product[:product_errors]
          { product_errors: product[:product_errors] }.to_json
        else
          { product: product[:product].values }.to_json
        end
      end
    end
  end

  post '/product_edit' do
    process_request request, 'product_edit' do |_req, _username|
      if params['product_data']
        Product.edit(params['product_data']['id'], params['product_data']['name'])
      else
        { product_errors: { product: ['product_data not found'] } }.to_json
      end
    end
  end

  post '/product_delete' do
    process_request request, 'product_delete' do |_req, _username|
      errors = Product.product_id_validation(params['product_data']['id'])
      Product[id: params['product_data']['id']].destroy if errors.empty?
      status 200
      { product: params['product_data']['id'], errors: }.to_json
    end
  end
  # endregion products

  # region plans
  post '/plan_new' do
    process_request request, 'plan_new' do |_req, _username|
      objects = Plan.create_new(params)
      if objects[:plan_errors].nil? && objects[:product_errors].nil?
        { plan: objects[:plan].values, product: objects[:product].values, request_status: objects[:request_status] }.to_json
      else
        status 422
        errors = { plan_errors: objects[:plan_errors] }
        errors[:product_errors] = objects[:product_errors] unless objects[:product_errors].nil?
        errors.to_json
      end
    end
  end

  post '/plans' do
    process_request request, 'plans' do |_req, _username|
      result = Product.get_plans(params['plan_data'])
      status 422 unless result[:errors]
      { plans: result[:plans], errors: result[:errors], request_status: result[:request_status] }.to_json
    end
  end

  post '/plans_statistic' do
    process_request request, 'plans_statistic' do |_req, _username|
      statistic = Product.get_statistic(params['plan_data'])
      { statistic: }.to_json
    end
  end

  post '/plan' do
    process_request request, 'plan' do |_req, _username|
      plan = Plan[id: params['plan_data']['id']]
      plan = plan.values unless plan.nil?
      { plan: }.to_json
    end
  end

  post '/plan_edit' do
    process_request request, 'plan_edit' do |_req, _username|
      plan = Plan.edit(params)
      if plan[:plan_errors].nil?
        { plan: plan.values }
      else
        plan
      end.to_json
    end
  end

  post '/plan_delete' do
    process_request request, 'plan_delete' do |_req, _username|
      errors = Plan.plan_id_validation(params['plan_data']['id'])
      plan = Plan[id: params['plan_data']['id']]
      plan.destroy if errors.empty?
      { plan: plan.values, errors: }.to_json
    end
  end

  post '/plan_archive' do
    process_request request, 'plan_archive' do |_req, _username|
      plan = Plan.archive(params['plan_data']['id'])
      { plan: plan.values }.to_json
    end
  end
  # endregion plans

  # region runs
  post '/run_new' do
    process_request request, 'run_new' do |_req, _username|
      objects = Run.create_new(params)
      if objects[:product_errors].nil? && objects[:plan_errors].nil? && objects[:run_errors].nil?
        run = Plan.add_statistic([*objects[:run]]).first
        result = { run: }
        result[:product] = objects[:product].values unless objects[:product].nil?
        result[:plan] = objects[:plan].values unless objects[:plan].nil?
        result[:suite] = objects[:suite].values unless objects[:suite].nil?
        result.to_json
      else
        status 422
        errors = { run_errors: objects[:run_errors] }
        errors[:product_errors] = objects[:product_errors] unless objects[:product_errors].nil?
        errors[:plan_errors] = objects[:plan_errors] unless objects[:plan_errors].nil?
        errors.to_json
      end
    end
  end

  post '/runs' do
    process_request request, 'runs' do |_req, _username|
      results, suites, errors = Plan.get_runs(params['run_data']['plan_id'])
      runs = Plan.add_statistic(results[:runs])
      status 422 unless errors
      { runs:, errors:, suites:, plan: results[:plan] }.to_json
    end
  end

  post '/run' do
    process_request request, 'run' do |_req, _username|
      run = Run[id: params['run_data']['id']]
      if run
        run = Plan.add_statistic([run]).first
        { run: }.to_json
      else
        { run: { errors: 'run not found' } }.to_json
      end
    end
  end

  post '/run_delete' do
    process_request request, 'run_delete' do |_req, _username|
      errors = Run.run_id_validation(params['run_data']['id'])
      Run[id: params['run_data']['id']].destroy if errors.empty?
      { run: params['run_data']['id'], errors: }.to_json
    end
  end
  # endregion runs

  # region result_set
  post '/result_set_new' do
    process_request request, 'result_set_new' do |_req, _username|
      objects = ResultSet.create_new(params)
      if objects[:product_errors].nil? && objects[:plan_errors].nil? && objects[:run_errors].nil? && objects[:result_sets_errors].nil?
        result = { result_sets: objects[:result_sets].map(&:values) }
        result[:product] = objects[:product].values unless objects[:product].nil?
        result[:plan] = objects[:plan].values unless objects[:plan].nil?
        result[:run] = objects[:run].values unless objects[:run].nil?
        result[:suite] = objects[:suite].values unless objects[:suite].nil?
        result.to_json
      else
        status 422
        errors = { result_sets_errors: objects[:result_sets_errors] }
        errors[:run_errors] = objects[:run_errors] unless objects[:run_errors].nil?
        errors[:product_errors] = objects[:product_errors] unless objects[:product_errors].nil?
        errors[:plan_errors] = objects[:plan_errors] unless objects[:plan_errors].nil?
        errors.to_json
      end
    end
  end

  post '/result_sets' do
    process_request request, 'result_sets' do |_req, _username|
      data, errors = Run.get_result_sets(params['result_set_data'])
      status 422 unless errors
      { result_sets: data[:result_sets].map(&:values), run: data[:run], errors: }.to_json
    end
  end

  post '/result_set' do
    process_request request, 'result_set' do |_req, _username|
      result_set = ResultSet[id: params['result_set_data']['id']]
      if result_set
        { result_sets: [result_set.values] }.to_json
      else
        { result_sets: nil }.to_json
      end
    end
  end

  post '/result' do
    process_request request, 'result' do |_req, _username|
      { result: Result[id: params['result_data']['id']].values }.to_json
    end
  end

  post '/result_set_delete' do
    process_request request, 'result_set_delete' do |_req, _username|
      errors = []
      begin
        result_set_id = params['result_set_data']['id']
        result_set_id = [result_set_id] unless result_set_id.is_a?(Array)
        result_set_size = result_set_id.size
        result_set_id.each_with_index do |id, index|
          ResultSet[id:].remove_all_results
          ResultSet[id:].delete
          logger.info("Deleting result_set: #{id} (#{index + 1}/#{result_set_size})")
        end
      rescue StandardError => e
        errors = e
      end
      { result_set: params['result_set_data'], errors: }.to_json
    end
  end

  post '/result_sets_by_status' do
    process_request request, 'result_sets_by_status' do |_req, _username|
      objects = ResultSet.get_result_sets_by_status(params)
      if objects[:product_errors].nil? && objects[:plan_errors].nil? &&
         objects[:run_errors].nil? && objects[:result_sets_errors].nil? &&
         objects[:status_errors].nil?
        result = {}
        result[:result_sets] = objects[:result_sets].map(&:values)
        result[:product] = objects[:product]
        result[:plan] = objects[:plan]
        result[:run] = objects[:run]
        result[:status] = objects[:status]
        result.to_json
      else
        status 422
        objects.to_json
      end
    end
  end

  # endregion result_set

  # region result
  post '/result_new' do
    process_request request, 'result_new' do |_req, _username|
      objects = Result.create_new(params)
      if objects[:product_errors].nil? && objects[:plan_errors].nil? &&
         objects[:run_errors].nil? && objects[:result_sets_errors].nil? &&
         objects[:status_errors].nil? && objects[:result_errors].nil?
        result = {}
        result[:result_sets] = objects[:result_sets].map(&:values) unless objects[:result_sets].nil?
        result[:product] = objects[:product].values unless objects[:product].nil?
        result[:plan] = objects[:plan].values unless objects[:plan].nil?
        result[:run] = objects[:run].values unless objects[:run].nil?
        result[:result] = objects[:result].values unless objects[:result].nil?
        result[:status] = objects[:status].values unless objects[:status].nil?
        result[:suite] = objects[:suite].values unless objects[:suite].nil?
        result[:product_id] = objects[:product_id]
        result.to_json
      else
        status 422
        objects.to_json
      end
    end
  end

  post '/results' do
    process_request request, 'results' do |_req, _username|
      data, errors = ResultSet.get_results(params['result_data'])
      if errors
        status 422 unless errors
        { errors: }.to_json
      else
        { results: data[:results].map(&:values),
          result_set: data[:result_set],
          product_id: data[:product_id] }.to_json
      end
    end
  end
  # endregion

  # region status
  post '/status_new' do
    process_request request, 'status_new' do |_req, _username|
      status = Status.create_new(params['status_data'])
      status 422 unless status.errors.empty?
      { status: status.values, errors: status.errors }.to_json
    end
  end

  post '/status_edit' do
    process_request request, 'status_edit' do |_req, _username|
      status = Status.edit(params['status_data'])
      status 422 unless status.errors.empty?
      { status: status.values, errors: status.errors }.to_json
    end
  end

  post '/statuses' do
    process_request request, 'statuses' do |_req, _username|
      statuses = Status.all
      statuses_ids = statuses.map(&:id)
      { statuses: (statuses_ids.zip statuses.map(&:values)).to_h }.to_json
    end
  end

  post '/not_blocked_statuses' do
    process_request request, 'not_blocked_statuses' do |_req, _username|
      statuses = Status.where(block: false)
      statuses_ids = statuses.map(&:id)
      { statuses: (statuses_ids.zip statuses.map(&:values)).to_h }.to_json
    end
  end
  # endregion

  # region suites
  post '/suites' do
    process_request request, 'suites' do |_req, _username|
      suites = Suite.where(product_id: params['suite_data']['product_id'])
      suites = Product.add_case_counts(suites, plan)
      { suites: }.to_json
    end
  end

  post '/suite_edit' do
    process_request request, 'suite_edit' do |_req, _username|
      suite = Suite.edit(params['suite_data'])
      if suite.errors.empty?
        { suite: suite.values.merge(statistic: [{ status: 0,
                                                  count: 0 }]) }.to_json
      else
        { errors: suite.errors }.to_json
      end
    end
  end

  post '/suite_delete' do
    process_request request, 'suite_delete' do |_req, _username|
      begin
        plan = Plan[params['suite_data']['plan_id']]
        Plan.add_all_suites(plan) if plan.suites.empty?
        Plan.add_all_cases(plan) if plan.cases.empty?
        suite = plan.remove_suite(Suite[id: params['suite_data']['id']])
        suite.update(deleted: true)
        plan = Plan.remove_cases_by_suite(plan, suite)
      rescue StandardError => e
        errors = e
      end
      { suite: suite.values.merge(statistic: [{ 'suite_id' => 0, 'status' => 0, 'count' => 0 }]),
        errors:,
        plan: plan.values.merge(case_count: plan.cases.count) }.to_json
    end
  end
  # endregion

  # region cases
  post '/cases' do
    process_request request, 'cases' do |_req, _username|
      cases, suite = Case.get_cases(params['case_data'])
      { cases: cases.map(&:values), suite: suite.values }.to_json
    end
  end

  post '/case_edit' do
    process_request request, 'case_edit' do |_req, _username|
      this_case = Case.edit(params['case_data'])
      { case: this_case.values }.to_json
    end
  end

  post '/case_delete' do
    process_request request, 'case_delete' do |_req, _username|
      plan = Plan[params['case_data']['plan_id']]
      plan = Plan.add_all_cases(plan) if plan.cases.empty?
      case_ids = params['case_data']['id']
      case_ids = [case_ids] unless case_ids.is_a?(Array)
      cases_size = case_ids.size
      this_case = nil
      case_ids.each_with_index do |case_id, index|
        this_case = plan.remove_case(Case[case_id])
        this_case.update(deleted: true)
        logger.info("Deleting case: #{case_id} (#{index + 1}/#{cases_size})")
      end

      { cases: case_ids, case: this_case.values }.to_json
    end
  end
  # endregion

  # region history
  post '/case_history' do
    process_request request, 'case_history' do |_req, _username|
      result_sets, product_id, suite_name = Case.get_history(params)
      { result_sets_history: result_sets, product_id:, suite_name: }.to_json
    end
  end
  # endregion

  # region invite_token
  # {"api_token_data" => {"name": string} }
  post '/create_invite_token' do
    process_request request, 'get_invite_token' do |_req, username|
      invite = Invite.create_new(username)
      { invite_data: invite.values }.to_json
    end
  end

  post '/get_invite_token' do
    process_request request, 'get_invite_token' do |_req, username|
      if User[email: username].invite.nil?
        { invite_data: nil }.to_json
      else
        { invite_data: User[email: username].invite.values }.to_json
      end
    end
  end

  post '/check_link_validation' do
    process_request request, 'check_link_validation' do |_req, _username|
      valid_status, error = Invite.check_link_validation(params['token'])
      { validation: valid_status, errors: error }.to_json
    end
  end
  # endregion

  # region api_token
  # {"api_token_data" => {"name": string} }
  post '/token_new' do
    process_request request, 'token_new' do |_req, username|
      result_token = Token.create_new(params['token_data'], token(username), username)
      { token_data: result_token.values, errors: result_token.errors }.to_json
    end
  end

  post '/tokens' do
    process_request request, 'tokens' do |_req, username|
      result_token = User[email: username].tokens
      { tokens: result_token.map(&:values) }.to_json
    end
  end

  post '/token_delete' do
    process_request request, 'token_delete' do |_req, _username|
      Token[id: params['token_data']['id']].destroy
      { token: params['token_data']['id'] }.to_json
    end
  end
  # endregion

  # region product_position
  post '/set_product_position' do
    process_request request, 'set_product_position' do |_req, username|
      if params['product_position'].is_a?(Array)
        user = User[email: username]
        user.update(product_position: Sequel.pg_array(params['product_position']))
        { user: { email: user.email, product_position: user.product_position } }.to_json
      else
        { product_position_errors: 'product position must be array' }.to_json
      end
    end
  end
  # endregion product_position

  # region user_setting
  post '/user_setting' do
    process_request request, 'user_setting' do |_req, username|
      user_setting = User[email: username].user_setting
      { timezone: user_setting&.timezone }.to_json
    end
  end

  post '/user_setting_edit' do
    process_request request, 'user_setting_edit' do |_req, username|
      UserSetting.edit(User[email: username].user_setting, params['user_settings'])
    end
  end
  # endregion user_setting

  def process_request(req, scope)
    scopes, user = req.env.values_at :scopes, :user
    username = user['email']
    user_token = true
    user_token = User.user_token?(username, req.env['HTTP_AUTHORIZATION']) if scopes == %w[result_new result_sets_by_status]
    if scopes.include?(scope) && User[email: username].exists? && user_token
      yield req, username
    else
      halt 403
    end
  end

  def payload(email)
    {
      exp: Time.new(2050, 1, 1).to_i,
      iat: Time.now.to_i,
      iss: 'API',
      scopes: %w[result_new result_sets_by_status],
      user: {
        email:
      }
    }
  end
end

class Public < Sinatra::Base
  include JwtHelper
  register Sinatra::CrossOrigin

  before do
    halt 200, { 'Access-Control-Allow-Origin' => '*', 'Access-Control-Allow-Headers' => 'Authorization, Content-Type' }, [] if env['REQUEST_METHOD'] == 'OPTIONS'
    cross_origin
    body = request.body.read
    @params = JSON.parse(body) unless body == ''
  end

  post '/login' do
    cross_origin
    current_user = User.find(email: user_data['email'])
    if !current_user.nil? && current_user.password == user_data['password']
      { token: token(user_data['email']) }.to_json
    else
      halt 401, { errors: 'User or password not correct' }.to_json
    end
  end

  get '/login' do
    erb :login
  end

  get '/up' do
    erb :up
  end

  get '/registration' do
    valid_status = Invite.check_link_validation(params['invite'])
    { token: params['invite'], validation: valid_status }.to_json
  end

  # region auth
  get '/logout' do
    session[:user] = nil
    redirect '/'
  end

  post '/registration' do
    cross_origin
    valid_status = Invite.check_link_validation(user_data['invite'])
    if User.all.empty? || (ENV.fetch('RACK_ENV', 'unknown env') != 'production' && params['invite'].nil?)
      valid_status[0] = true
      valid_status[1] = []
    end
    if valid_status.first
      new_user = User.create_new(user_data)
      { email: user_data['email'], errors: new_user.errors.values }.to_json
    else
      { email: user_data['email'], errors: valid_status[1] }.to_json
    end
  end

  post '/no_users' do
    cross_origin
    { no_users: User.empty? }.to_json
  end

  def user_data
    params['user_data']
  rescue StandardError => e
    e
  end

  # Timeout of payload
  # @return [Integer] time in seconds
  def payload_expiration_timeout
    seconds_in_day = 86_400
    30 * seconds_in_day
  end

  # header + . + payload + . + signature
  # header = type + algorithm
  def payload(email = nil)
    {
      exp: Time.now.to_i + payload_expiration_timeout,
      iat: Time.now.to_i,
      iss: ENV.fetch('JWT_ISSUER', ''),
      scopes: %w[products product product_new product_delete product_edit
                 plan_new plans plans_statistic plan_archive plans_and_statistic plan plan_edit plan_delete
                 run_new runs run run_delete
                 result_set_new result_sets result_set result_set_delete
                 result_new results
                 status_new statuses status_edit not_blocked_statuses
                 token_new tokens token_delete suites suite_edit
                 suite_delete cases case_delete case_edit result
                 case_history get_invite_token check_link_validation set_product_position user_setting user_setting_edit],
      user: {
        email:
      }
    }
  end

  post '/version' do
    { version: '0.6.0' }.to_json
  end
end