// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CONTENT_BROWSER_WEBID_MAPPERS_H_
#define CONTENT_BROWSER_WEBID_MAPPERS_H_

#include <string>
#include <vector>

#include "content/browser/renderer_host/render_frame_host_impl.h"
#include "content/browser/webid/delegation/evt_verifier.h"
#include "content/browser/webid/idp_network_request_manager.h"
#include "content/browser/webid/metrics.h"
#include "content/common/content_export.h"
#include "content/public/browser/webid/federated_identity_api_permission_context_delegate.h"
#include "content/public/browser/webid/identity_request_dialog_controller.h"
#include "third_party/blink/public/mojom/devtools/inspector_issue.mojom-forward.h"
#include "third_party/blink/public/mojom/webid/email_verification_request.mojom-forward.h"
#include "third_party/blink/public/mojom/webid/federated_request.mojom-forward.h"

namespace content {

enum class FedCmLifecycleStateFailureReason;

namespace webid {

enum class FederatedLoginResult;

// This header file defines functions which convert between FedCM types. It also
// defines some constants used in some of these conversions.

inline constexpr char kDefaultFieldName[] = "name";
inline constexpr char kDefaultFieldEmail[] = "email";
inline constexpr char kDefaultFieldPicture[] = "picture";
inline constexpr char kFieldPhoneNumber[] = "tel";
inline constexpr char kFieldUsername[] = "username";

// Error codes sent to the metrics endpoint.
// Enum is part of public FedCM API. Do not renumber error codes.
// The error codes are not consecutive to make adding error codes easier in
// the future.
enum class MetricsEndpointErrorCode {
  kNone = 0,  // Success
  kOther = 1,
  // Errors triggered by how RP calls FedCM API.
  kRpFailure = 100,
  // User Failures.
  kUserFailure = 200,
  // Generic IDP Failures.
  kIdpServerInvalidResponse = 300,
  kIdpServerUnavailable = 301,
  kManifestError = 302,
  // Specific IDP Failures.
  kAccountsEndpointInvalidResponse = 401,
  kTokenEndpointInvalidResponse = 402,
};

// Converts a list of IdentityRequestDialogDisclosureField to a list of strings.
// May return an empty list.
std::vector<std::string> DisclosureFieldsToStringList(
    const std::vector<IdentityRequestDialogDisclosureField>& fields);

// Converts a FederatedRequestResult, which is a browser type for the
// result, to a RequestTokenStatus, which is a renderer type, e.g. the one to be
// exposed to web developers.
blink::mojom::RequestTokenStatus FederatedRequestResultToRequestTokenStatus(
    blink::mojom::FederatedRequestResult result);

// Converts a FederatedRequestResult, which is a browser type for the
// result, to a MetricsEndpointErrorCode, which is a type used in the metrics
// endpoint error code.
MetricsEndpointErrorCode FederatedRequestResultToMetricsEndpointErrorCode(
    blink::mojom::FederatedRequestResult result);

// Converts an error ParseStatus from the accounts response to a pair. The first
// member of the pair is a FederatedRequestResult, which is a browser type
// for the result. The second member of the pair is a FedCmRequestIdTokenStatus,
// which is a type used in metrics recording. Should not be invoked with
// ParseStatus::kSuccess.
std::pair<blink::mojom::FederatedRequestResult, RequestIdTokenStatus>
AccountParseStatusToRequestResultAndTokenStatus(ParseStatus status);

LifecycleStateFailureReason
LifecycleStateImplLifecycleStateImplToFedCmLifecycleStateFailureReason(
    RenderFrameHostImpl::LifecycleStateImpl lifecycle_state);

// Converts a FederatedApiPermissionStatus to a (FederatedRequestResult,
// FedCmRequestIdTokenStatus) pair. Should not be invoked with
// FederatedApiPermissionStatus::GRANTED.
std::pair<blink::mojom::FederatedRequestResult, RequestIdTokenStatus>
PermissionStatusToRequestResultAndTokenStatus(
    FederatedIdentityApiPermissionContextDelegate::PermissionStatus
        permission_status);

ErrorDialogResult DismissReasonToErrorDialogResult(
    IdentityRequestDialogController::DismissReason dismiss_reason,
    bool has_url);

// Converts a FetchStatus from the ID assertion endpoint to a
// (FederatedRequestResult, FedCmRequestIdTokenStatus) pair. Should not be
// invoked when the parse_status is ParseStatus::kSuccess.
std::pair<blink::mojom::FederatedRequestResult, RequestIdTokenStatus>
IdAssertionFetchStatusToRequestResultAndTokenStatus(FetchStatus status);

// Converts a ParseStatus from a well-known fetch to an EvpRequestStatus.
// Should not be invoked when parse_status is ParseStatus::kSuccess.
CONTENT_EXPORT blink::mojom::EmailVerificationRequestResult
WellKnownParseStatusToEvpRequestStatus(ParseStatus parse_status);

// Converts a ParseStatus from an email verification well-known fetch to an
// EvpRequestStatus.
// Should not be invoked when parse_status is ParseStatus::kSuccess.
CONTENT_EXPORT blink::mojom::EmailVerificationRequestResult
EmailVerificationWellKnownParseStatusToEvpRequestStatus(
    ParseStatus parse_status);

// Converts a ParseStatus from an accounts list fetch to an EvpRequestStatus.
// Should not be invoked when parse_status is ParseStatus::kSuccess.
CONTENT_EXPORT blink::mojom::EmailVerificationRequestResult
AccountsListParseStatusToEvpRequestStatus(ParseStatus parse_status);

// Converts a ParseStatus from a token fetch to an EvpRequestStatus.
// Should not be invoked when parse_status is ParseStatus::kSuccess.
CONTENT_EXPORT blink::mojom::EmailVerificationRequestResult
TokenParseStatusToEvpRequestStatus(ParseStatus parse_status);

// Converts a ParseStatus from a JWKS fetch to an EvpRequestStatus.
// Should not be invoked when parse_status is ParseStatus::kSuccess.
CONTENT_EXPORT blink::mojom::EmailVerificationRequestResult
JwksParseStatusToEvpRequestStatus(ParseStatus parse_status);

CONTENT_EXPORT blink::mojom::EmailVerificationRequestResult
VerificationResultToEvpRequestStatus(EvtVerifier::Result result);

// Returns a list of fields that we should mediate authorization for. If
// empty, we should not show a permission request dialog.
CONTENT_EXPORT std::vector<IdentityRequestDialogDisclosureField>
GetDisclosureFields(const std::optional<std::vector<std::string>>& fields);

// Computes the effective fields for an account based on the requested fields,
// the login state and the available account data.
CONTENT_EXPORT void ComputeAccountFields(
    const std::vector<IdentityRequestDialogDisclosureField>& rp_fields,
    std::vector<scoped_refptr<IdentityRequestAccount>>& accounts);

// Converts a FederatedRequestResult to a FederatedLoginResult. The later is
// a less granular result type used by the embedder.
FederatedLoginResult FederatedRequestResultToFederatedLoginResult(
    blink::mojom::FederatedRequestResult result);

}  // namespace webid
}  // namespace content

#endif  // CONTENT_BROWSER_WEBID_MAPPERS_H_