// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "chrome/browser/enterprise/client_certificates/certificate_provisioning_service_factory.h"

#include <memory>
#include <utility>

#include "base/memory/scoped_refptr.h"
#include "base/no_destructor.h"
#include "chrome/browser/browser_process.h"
#include "chrome/browser/enterprise/client_certificates/certificate_store_factory.h"
#include "chrome/browser/enterprise/client_certificates/profile_context_delegate.h"
#include "chrome/browser/enterprise/core/dependency_factory_impl.h"
#include "chrome/browser/enterprise/identifiers/profile_id_service_factory.h"
#include "chrome/browser/policy/chrome_browser_policy_connector.h"
#include "chrome/browser/profiles/profile.h"
#include "components/enterprise/browser/identifiers/profile_id_service.h"
#include "components/enterprise/client_certificates/core/certificate_provisioning_service.h"
#include "components/enterprise/client_certificates/core/certificate_store.h"
#include "components/enterprise/client_certificates/core/cloud_management_delegate.h"
#include "components/enterprise/client_certificates/core/dm_server_client.h"
#include "components/enterprise/client_certificates/core/features.h"
#include "components/enterprise/client_certificates/core/key_upload_client.h"
#include "components/enterprise/client_certificates/core/profile_cloud_management_delegate.h"
#include "components/enterprise/core/dependency_factory.h"
#include "components/keyed_service/core/keyed_service.h"
#include "components/policy/core/browser/browser_policy_connector.h"
#include "components/policy/core/common/cloud/device_management_service.h"
#include "services/network/public/cpp/shared_url_loader_factory.h"

namespace client_certificates {

namespace {

policy::DeviceManagementService* GetDeviceManagementService() {
  policy::BrowserPolicyConnector* connector =
      g_browser_process->browser_policy_connector();
  return connector ? connector->device_management_service() : nullptr;
}

}  // namespace

// static
CertificateProvisioningServiceFactory*
CertificateProvisioningServiceFactory::GetInstance() {
  static base::NoDestructor<CertificateProvisioningServiceFactory> instance;
  return instance.get();
}

// static
CertificateProvisioningService*
CertificateProvisioningServiceFactory::GetForProfile(Profile* profile) {
  return static_cast<CertificateProvisioningService*>(
      GetInstance()->GetServiceForBrowserContext(profile, true));
}

CertificateProvisioningServiceFactory::CertificateProvisioningServiceFactory()
    : ProfileKeyedServiceFactory("CertificateProvisioningService",
                                 ProfileSelections::BuildForRegularProfile()) {
  DependsOn(CertificateStoreFactory::GetInstance());
  DependsOn(enterprise::ProfileIdServiceFactory::GetInstance());
}

CertificateProvisioningServiceFactory::
    ~CertificateProvisioningServiceFactory() = default;

bool CertificateProvisioningServiceFactory::ServiceIsCreatedWithBrowserContext()
    const {
  return true;
}

bool CertificateProvisioningServiceFactory::ServiceIsNULLWhileTesting() const {
  return true;
}

std::unique_ptr<KeyedService>
CertificateProvisioningServiceFactory::BuildServiceInstanceForBrowserContext(
    content::BrowserContext* context) const {
  auto* profile = Profile::FromBrowserContext(context);
  if (!profile) {
    return nullptr;
  }


  auto* certificate_store = CertificateStoreFactory::GetForProfile(profile);
  auto url_loader_factory = profile->GetURLLoaderFactory();
  auto* device_management_service = GetDeviceManagementService();
  auto* profile_id_service =
      enterprise::ProfileIdServiceFactory::GetForProfile(profile);
  if (!certificate_store || !url_loader_factory || !device_management_service ||
      !profile_id_service) {
    return nullptr;
  }

  return CertificateProvisioningService::Create(
      profile->GetPrefs(), certificate_store,
      std::make_unique<ProfileContextDelegate>(profile),
      KeyUploadClient::Create(
          std::make_unique<
              enterprise_attestation::ProfileCloudManagementDelegate>(
              std::make_unique<enterprise_core::DependencyFactoryImpl>(profile),
              profile_id_service,
              enterprise_attestation::DMServerClient::Create(
                  device_management_service, std::move(url_loader_factory)))));
}

}  // namespace client_certificates