// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef IOS_CHROME_BROWSER_POLICY_MODEL_CLOUD_USER_POLICY_SIGNIN_SERVICE_H_
#define IOS_CHROME_BROWSER_POLICY_MODEL_CLOUD_USER_POLICY_SIGNIN_SERVICE_H_

#import <memory>

#import "base/memory/raw_ptr.h"
#import "base/scoped_observation.h"
#import "components/policy/core/browser/cloud/user_policy_signin_service_base.h"
#import "components/signin/public/identity_manager/identity_manager.h"

namespace enterprise {
class ProfileIdService;
}  // namespace enterprise

namespace policy {

class CloudPolicyClientRegistrationHelper;
class EnterpriseGroupsProfileHandler;

// A specialization of UserPolicySigninServiceBase for iOS.
class UserPolicySigninService : public UserPolicySigninServiceBase,
                                public signin::IdentityManager::Observer {
 public:
  // Creates a UserPolicySigninService associated with the profile.
  UserPolicySigninService(
      PrefService* pref_service,
      PrefService* local_state,
      enterprise::ProfileIdService* profile_id_service,
      DeviceManagementService* device_management_service,
      UserCloudPolicyManager* policy_manager,
      signin::IdentityManager* identity_manager,
      EnterpriseGroupsProfileHandler* enterprise_groups_profile_handler,
      scoped_refptr<network::SharedURLLoaderFactory> system_url_loader_factory);
  UserPolicySigninService(const UserPolicySigninService&) = delete;
  UserPolicySigninService& operator=(const UserPolicySigninService&) = delete;
  ~UserPolicySigninService() override;

  // signin::IdentityManager::Observer implementation:
  void OnPrimaryAccountChanged(
      const signin::PrimaryAccountChangeEvent& event) override;

  // CloudPolicyClient::Observer implementation:
  void OnPolicyFetched(CloudPolicyClient* client) override;

  // KeyedService implementation:
  void Shutdown() override;

  // Notifies that the user has seen the notification about User Policy.
  void OnUserPolicyNotificationSeen();

 private:
  // UserPolicySigninServiceBase implementation:
  base::TimeDelta GetTryRegistrationDelay() override;
  void UpdateLastPolicyCheckTime() override;
  bool CanApplyPolicies(bool check_for_refresh_token) override;
  std::string GetProfileId() override;
  void ShutdownCloudPolicyManager() override;
  void InitializeCloudPolicyManager(
      const AccountId& account_id,
      std::unique_ptr<CloudPolicyClient> client) override;

  // Tries to initialize the service if a signed in account is available and
  // eligible for user policy.
  void TryInitialize();

  // Helper used to register for user policy.
  std::unique_ptr<CloudPolicyClientRegistrationHelper> registration_helper_;

  // The PrefService and ProfileIdService associated with the Profile.
  raw_ptr<PrefService> pref_service_;
  raw_ptr<enterprise::ProfileIdService> profile_id_service_;
  raw_ptr<EnterpriseGroupsProfileHandler> enterprise_groups_profile_handler_;

  base::ScopedObservation<signin::IdentityManager,
                          signin::IdentityManager::Observer>
      scoped_identity_manager_observation_{this};
};

}  // namespace policy

#endif  // IOS_CHROME_BROWSER_POLICY_MODEL_CLOUD_USER_POLICY_SIGNIN_SERVICE_H_