import { AbstractAuthProvider } from 'tinacms'

export class CustomAuthProvider extends AbstractAuthProvider {
  constructor() {
    super()
    // Do any setup here
  }
  async authenticate(props?: {}): Promise<any> {
    // Do any authentication here
  }
  async getToken() {
    // Return the token here. The token will be passed as an Authorization header in the format `Bearer <token>`
  }
  async getUser() {
    // Returns a truthy value, the user is logged in and if it returns a falsy value the user is not logged in.
  }
  async logout() {
    // Do any logout logic here
  }
  async authorize(context?: any): Promise<any> {
    // Do any authorization logic here
  }
  getSessionProvider() {
    // GetSessionProvider can be deleted if not needed
    // OPTIONALLY Return a React context provider to that will wrap the admin
  }
}

export default defineConfig({
  authProvider: isLocal ? new LocalAuthProvider() : new CustomAuthProvider(),
  //...
})

export interface BackendAuthProvider {
  initialize?: () => Promise<void>
  isAuthorized: (
    req: IncomingMessage,
    res: ServerResponse
  ) => Promise<
    | {
        isAuthorized: true
      }
    | {
        isAuthorized: false
        errorMessage: string
        errorCode: number
      }
  >
  // You can use this if you need to attach any extra routes to the backend. Ex, a callback route for OAuth
  extraRoutes?: {
    [key: string]: {
      // If secure is true the `isAuthorized` function will be called before the handler is called
      secure?: boolean
      handler: (req: IncomingMessage, res: ServerResponse) => Promise<void>
    }
  }
}

const CustomBackendAuth = () => {
  return {
    isAuthorized: async (req, res) => {
      const token = req.headers.authorization
      // Validate the token here
      return {
        isAuthorized: true,
      }
    },
  }
}

const handler = TinaNodeBackend({
  authProvider: isLocal ? LocalBackendAuthProvider() : CustomBackendAuth(),
  databaseClient,
})