// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CHROME_BROWSER_ASH_LOGIN_SCREENS_OSAUTH_CRYPTOHOME_RECOVERY_SCREEN_H_
#define CHROME_BROWSER_ASH_LOGIN_SCREENS_OSAUTH_CRYPTOHOME_RECOVERY_SCREEN_H_

#include <memory>
#include <optional>
#include <string>

#include "base/functional/callback.h"
#include "base/memory/raw_ref.h"
#include "base/memory/scoped_refptr.h"
#include "base/memory/weak_ptr.h"
#include "base/timer/timer.h"
#include "base/values.h"
#include "chrome/browser/ash/login/screens/base_screen.h"
#include "chromeos/ash/components/login/auth/auth_factor_editor.h"
#include "chromeos/ash/components/login/auth/public/authentication_error.h"
#include "chromeos/ash/components/login/auth/public/user_context.h"
#include "chromeos/ash/components/login/auth/recovery/cryptohome_recovery_performer.h"

class PrefService;

namespace network {
class SharedURLLoaderFactory;
}

namespace ash {

class CryptohomeRecoveryScreenView;

// Controller for the Cryptohome recovery screen.
class CryptohomeRecoveryScreen : public BaseScreen {
 public:
  using TView = CryptohomeRecoveryScreenView;
  enum class Result {
    kGaiaLogin,
    kAuthenticated,
    kError,
    kFallbackOnline,
    kFallbackLocal
  };
  static std::string GetResultString(Result result);
  using ScreenExitCallback = base::RepeatingCallback<void(Result result)>;

  // `local_state` must outlive `this`.
  // `shared_url_loader_factory` must be non-null.
  CryptohomeRecoveryScreen(
      PrefService& local_state,
      scoped_refptr<network::SharedURLLoaderFactory> shared_url_loader_factory,
      base::WeakPtr<CryptohomeRecoveryScreenView> view,
      const ScreenExitCallback& exit_callback);
  ~CryptohomeRecoveryScreen() override;

  CryptohomeRecoveryScreen(const CryptohomeRecoveryScreen&) = delete;
  CryptohomeRecoveryScreen& operator=(const CryptohomeRecoveryScreen&) = delete;

  ScreenExitCallback get_exit_callback_for_testing() { return exit_callback_; }
  void set_exit_callback_for_testing(const ScreenExitCallback& callback) {
    exit_callback_ = callback;
  }
  base::OneShotTimer* get_timer_for_testing() {
    return expiration_timer_.get();
  }

 protected:
  // BaseScreen:
  void ShowImpl() override;
  void HideImpl() override;
  void OnUserAction(const base::ListValue& args) override;

 private:
  void OnGetAuthFactorsConfiguration(std::unique_ptr<UserContext> user_context,
                                     std::optional<AuthenticationError> error);
  void OnAuthenticateWithRecovery(std::unique_ptr<UserContext> context,
                                  std::optional<AuthenticationError> error);
  void OnRotateRecoveryFactor(std::unique_ptr<UserContext> context,
                              std::optional<AuthenticationError> error);
  void OnReplaceContextKey(std::unique_ptr<UserContext> context,
                           std::optional<AuthenticationError> error);
  void OnAuthSessionExpired();

  void OnRefreshFactorsConfiguration(std::unique_ptr<UserContext> user_context,
                                     std::optional<AuthenticationError> error);

  const raw_ref<PrefService> local_state_;
  const scoped_refptr<network::SharedURLLoaderFactory>
      shared_url_loader_factory_;

  std::unique_ptr<base::OneShotTimer> expiration_timer_;
  AuthFactorEditor auth_factor_editor_;
  std::unique_ptr<CryptohomeRecoveryPerformer> recovery_performer_;

  base::WeakPtr<CryptohomeRecoveryScreenView> view_ = nullptr;

  ScreenExitCallback exit_callback_;

  // Indicates whether the reauth proof token was missing during the last
  // recovery attempt. This flag helps us determine if we should ask the user to
  // perform reauth again.
  bool was_reauth_proof_token_missing_ = false;

  base::WeakPtrFactory<CryptohomeRecoveryScreen> weak_ptr_factory_{this};
};

}  // namespace ash

#endif  // CHROME_BROWSER_ASH_LOGIN_SCREENS_OSAUTH_CRYPTOHOME_RECOVERY_SCREEN_H_