using System.ComponentModel.DataAnnotations;
using OpenIddict.Abstractions;

namespace Dpz.Core.Auth.Models.AdminApi;

/// <summary>
/// 创建 OAuth 2.0 / OpenID Connect 应用请求
/// </summary>
public class CreateAuthApplicationRequest : AdminMfaRequest, IValidatableObject
{
    /// <summary>
    /// 客户端唯一标识符
    /// </summary>
    [Required(ErrorMessage = "请填写 ClientId")]
    public string ClientId { get; set; } = string.Empty;

    /// <summary>
    /// 客户端密钥（机密客户端必填）
    /// </summary>
    public string? ClientSecret { get; set; }

    /// <summary>
    /// 应用显示名称
    /// </summary>
    [Required(ErrorMessage = "请填写显示名称")]
    public string DisplayName { get; set; } = string.Empty;

    /// <summary>
    /// 应用 Logo URL
    /// </summary>
    public string? Logo { get; set; }

    /// <summary>
    /// 应用类型（如 "web"、"native"、"spa"）
    /// </summary>
    public string? ApplicationType { get; set; }

    /// <summary>
    /// 客户端类型（公开 / 机密）
    /// </summary>
    [Required(ErrorMessage = "请选择客户端类型")]
    public string ClientType { get; set; } = string.Empty;

    /// <summary>
    /// 允许的回调地址列表
    /// </summary>
    public List<string> RedirectUris { get; set; } = [];

    /// <summary>
    /// 登出后的回调地址
    /// </summary>
    public string? PostLogoutRedirectUri { get; set; }

    /// <summary>
    /// 授权许可列表（如 "openid"、"profile"、"email"）
    /// </summary>
    public List<string> Permissions { get; set; } = [];

    /// <summary>
    /// 验证机密客户端必须提供 ClientSecret
    /// </summary>
    public IEnumerable<ValidationResult> Validate(ValidationContext validationContext)
    {
        if (
            string.Equals(
                ClientType,
                OpenIddictConstants.ClientTypes.Confidential,
                StringComparison.OrdinalIgnoreCase
            ) && string.IsNullOrWhiteSpace(ClientSecret)
        )
        {
            yield return new ValidationResult(
                "机密客户端需填写 ClientSecret",
                [nameof(ClientSecret)]
            );
        }
    }
}