// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "components/signin/internal/identity_manager/account_fetcher_factory_gaia.h"

#include <memory>
#include <optional>

#include "base/feature_list.h"
#include "base/types/to_address.h"
#include "components/signin/internal/identity_manager/account_capabilities_fetcher_gaia.h"
#include "components/signin/internal/identity_manager/account_info_fetcher_gaia.h"
#include "components/signin/internal/identity_manager/profile_oauth2_token_service.h"
#include "components/signin/public/base/signin_client.h"
#include "google_apis/credentials_mode.h"
#include "google_apis/gaia/gaia_features.h"
#include "google_apis/gaia/gaia_urls.h"
#include "mojo/public/cpp/bindings/pending_remote.h"
#include "net/base/network_anonymization_key.h"
#include "net/base/schemeful_site.h"
#include "services/network/public/cpp/constants.h"
#include "services/network/public/cpp/shared_url_loader_factory.h"
#include "services/network/public/mojom/connection_change_observer_client.mojom.h"
#include "services/network/public/mojom/network_context.mojom.h"

namespace {

const GURL& GetAccountCapabilitiesUrl() {
  if (base::FeatureList::IsEnabled(
          gaia::features::kGetAccountCapabilitiesUsesGetAllVisibleUrl)) {
    return GaiaUrls::GetInstance()->account_capabilities_get_all_visible_url();
  }

  return GaiaUrls::GetInstance()->account_capabilities_batch_get_url();
}

}  // namespace

AccountFetcherFactoryGaia::AccountFetcherFactoryGaia(
    ProfileOAuth2TokenService& token_service,
    SigninClient& signin_client)
    : token_service_(token_service), signin_client_(signin_client) {}

AccountFetcherFactoryGaia::~AccountFetcherFactoryGaia() = default;

std::unique_ptr<AccountInfoFetcher>
AccountFetcherFactoryGaia::CreateAccountInfoFetcher(
    const CoreAccountId& account_id,
    base::OnceCallback<void(std::optional<AccountInfo>)> callback) {
  return std::make_unique<AccountInfoFetcherGaia>(
      *token_service_, signin_client_->GetURLLoaderFactory(), account_id,
      std::move(callback));
}

std::unique_ptr<AccountCapabilitiesFetcher>
AccountFetcherFactoryGaia::CreateAccountCapabilitiesFetcher(
    const CoreAccountInfo& account_info,
    AccountCapabilitiesFetcher::FetchPriority fetch_priority,
    AccountCapabilitiesFetcher::OnSomeCapabilitiesFetchedCallback
        on_some_capabilities_fetched_callback,
    AccountCapabilitiesFetcher::OnAllFetchesCompleteCallback
        on_all_fetches_complete_callback) {
  return std::make_unique<AccountCapabilitiesFetcherGaia>(
      base::to_address(token_service_), signin_client_->GetURLLoaderFactory(),
      account_info, fetch_priority,
      std::move(on_some_capabilities_fetched_callback),
      std::move(on_all_fetches_complete_callback));
}

void AccountFetcherFactoryGaia::PrepareForFetchingAccountCapabilities() {
  // Pre-connect the HTTPS socket to the Account Capabilities server URL.
  // This means that a fetch in the near future will be able to re-use this
  // connection, which saves on the HTTPS connection establishment round-trips.
  // Account capabilities fetches are browser-wide sign-in operations not
  // associated with any page/frame, so no Connection Allowlist restrictions
  // should apply.
  signin_client_->GetNetworkContext()->PreconnectSockets(
      /*num_streams=*/1, GetAccountCapabilitiesUrl(),
      google_apis::GetOmitCredentialsModeForGaiaRequests(),
      net::NetworkAnonymizationKey::CreateSameSite(
          net::SchemefulSite(GetAccountCapabilitiesUrl())),
      network::GetNoOpNetworkRestrictionsId(),
      net::MutableNetworkTrafficAnnotationTag(),
      /*keepalive_config=*/std::nullopt, mojo::NullRemote());
}