// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CHROME_BROWSER_ASH_LOGIN_SIGNIN_SIGNIN_ERROR_NOTIFIER_H_
#define CHROME_BROWSER_ASH_LOGIN_SIGNIN_SIGNIN_ERROR_NOTIFIER_H_

#include <string>
#include <vector>

#include "base/auto_reset.h"
#include "base/gtest_prod_util.h"
#include "base/memory/raw_ptr.h"
#include "base/memory/raw_ref.h"
#include "base/memory/weak_ptr.h"
#include "chrome/browser/ash/login/signin/legacy_token_handle_fetcher.h"
#include "chrome/browser/ash/login/signin/token_handle_util.h"
#include "components/account_id/account_id.h"
#include "components/account_manager_core/account.h"
#include "components/keyed_service/core/keyed_service.h"
#include "components/signin/core/browser/signin_error_controller.h"

namespace account_manager {
class AccountManager;
}

namespace signin {
class IdentityManager;
}

class Profile;
class PrefRegistrySimple;
class PrefService;

namespace ash {

// Shows signin-related errors as notifications in Ash.
class SigninErrorNotifier : public SigninErrorController::Observer,
                            public KeyedService {
 public:
  // `local_state` must be non-null and must outlive `this`.
  SigninErrorNotifier(PrefService* local_state,
                      SigninErrorController* controller,
                      Profile* profile);

  SigninErrorNotifier(const SigninErrorNotifier&) = delete;
  SigninErrorNotifier& operator=(const SigninErrorNotifier&) = delete;

  ~SigninErrorNotifier() override;

  // This also makes AuthErrorObserver do not report errors.
  static std::unique_ptr<base::AutoReset<bool>> IgnoreSyncErrorsForTesting();
  static bool ShouldIgnoreSyncErrorsForTesting();

  static void RegisterPrefs(PrefRegistrySimple* registry);

  // KeyedService:
  void Shutdown() override;

  // SigninErrorController::Observer:
  void OnErrorChanged() override;

 private:
  FRIEND_TEST_ALL_PREFIXES(SigninErrorNotifierTest, TokenHandleTest);
  FRIEND_TEST_ALL_PREFIXES(SigninErrorNotifierTest,
                           TokenHandleErrorsDoNotDisplaySecondaryAccountErrors);

  // Handles errors for the Device Account.
  // Displays a notification with `error_message`, asking the user to Sign Out -
  // as opposed to `HandleSecondaryAccountError` which asks the user to
  // re-authenticate in-session.
  void HandleDeviceAccountError(const std::u16string& error_message);

  // Handles errors for Secondary Accounts.
  // Displays a notification that allows users to open crOS Account Manager UI.
  // `account_id` is the account identifier (used by the Token Service chain)
  // for the Secondary Account which received an error.
  void HandleSecondaryAccountError(const CoreAccountId& account_id);

  // `account_manager::AccountManager::CheckDummyGaiaTokenForAllAccounts`
  // callback handler.
  void OnCheckDummyGaiaTokenForAllAccounts(
      const std::vector<std::pair<account_manager::Account, bool>>&
          account_dummy_token_list);

  void OnTokenHandleCheck(const AccountId& account_id,
                          const std::string& token,
                          bool reauth_required);

  // Handles clicks on the Secondary Account reauth notification. See
  // `message_center::HandleNotificationClickDelegate`.
  void HandleSecondaryAccountReauthNotificationClick(
      std::optional<int> button_index);

  const raw_ref<PrefService> local_state_;

  // The error controller to query for error details.
  raw_ptr<SigninErrorController> error_controller_;

  // The Profile this service belongs to.
  const raw_ptr<Profile> profile_;

  // A non-owning pointer to IdentityManager.
  const raw_ptr<signin::IdentityManager> identity_manager_;

  // A non-owning pointer.
  const raw_ptr<account_manager::AccountManager> account_manager_;

  // A non-owning pointer to the global `TokenHandleStore` instance.
  // Instances of this class are guaranteed to outlive the global
  // `TokenHandleStore` instance which is created early, prior to profile
  // loading, and never destroyed.
  raw_ptr<TokenHandleStore> token_handle_store_;
  std::unique_ptr<LegacyTokenHandleFetcher> token_handle_fetcher_;

  // Used to keep track of the message center notifications.
  std::string device_account_notification_id_;
  std::string secondary_account_notification_id_;

  base::WeakPtrFactory<SigninErrorNotifier> weak_factory_{this};
};

}  // namespace ash

#endif  // CHROME_BROWSER_ASH_LOGIN_SIGNIN_SIGNIN_ERROR_NOTIFIER_H_