<?php

declare(strict_types=1);

namespace App\Socialite;

use GuzzleHttp\RequestOptions;
use Laravel\Socialite\Two\AbstractProvider;
use Laravel\Socialite\Two\ProviderInterface;
use Laravel\Socialite\Two\User;

class InstagramProvider extends AbstractProvider implements ProviderInterface
{
    protected $scopes = [
        'instagram_business_basic',
        'instagram_business_content_publish',
    ];

    protected function getAuthUrl($state): string
    {
        // enable_fb_login=0 forces the pure Instagram Login flow (without
        // delegating to Facebook OAuth). Tokens issued from the FB-delegated
        // path can't be exchanged via graph.instagram.com/access_token.
        return 'https://www.instagram.com/oauth/authorize?enable_fb_login=0&'.http_build_query([
            'client_id' => $this->clientId,
            'redirect_uri' => $this->redirectUrl,
            'response_type' => 'code',
            'scope' => implode(',', $this->getScopes()),
            'state' => $state,
        ]);
    }

    protected function getTokenUrl(): string
    {
        return 'https://api.instagram.com/oauth/access_token';
    }

    protected function getUserByToken($token): array
    {
        $response = $this->getHttpClient()->get(config('trypost.platforms.instagram.graph_api').'/me', [
            RequestOptions::QUERY => [
                'access_token' => $token,
                'fields' => 'id,username,account_type,name,profile_picture_url',
            ],
        ]);

        return json_decode((string) $response->getBody(), true);
    }

    protected function mapUserToObject(array $user): User
    {
        return (new User)->setRaw($user)->map([
            'id' => $user['id'],
            'nickname' => $user['username'] ?? null,
            'name' => $user['name'] ?? $user['username'] ?? null,
            'avatar' => $user['profile_picture_url'] ?? null,
        ]);
    }

    public function getAccessTokenResponse($code): array
    {
        // Meta's docs document this endpoint with curl -F flags (multipart/form-data).
        $multipart = [];
        foreach ($this->getTokenFields($code) as $name => $contents) {
            $multipart[] = ['name' => $name, 'contents' => (string) $contents];
        }

        $response = $this->getHttpClient()->post($this->getTokenUrl(), [
            RequestOptions::MULTIPART => $multipart,
        ]);

        $data = json_decode((string) $response->getBody(), true);

        return $this->exchangeForLongLivedToken($data);
    }

    protected function exchangeForLongLivedToken(array $data): array
    {
        // Although Meta's docs don't list `client_id` as a required parameter,
        // the API in practice rejects the request without it.
        $response = $this->getHttpClient()->get(config('trypost.platforms.instagram.auth_api').'/access_token', [
            RequestOptions::QUERY => [
                'grant_type' => 'ig_exchange_token',
                'client_id' => $this->clientId,
                'client_secret' => $this->clientSecret,
                'access_token' => data_get($data, 'access_token'),
            ],
        ]);

        $longLivedData = json_decode((string) $response->getBody(), true);

        return array_merge($data, [
            'access_token' => $longLivedData['access_token'],
            'expires_in' => $longLivedData['expires_in'] ?? null,
        ]);
    }

    protected function getTokenFields($code): array
    {
        return [
            'client_id' => $this->clientId,
            'client_secret' => $this->clientSecret,
            'grant_type' => 'authorization_code',
            'redirect_uri' => $this->redirectUrl,
            'code' => $code,
        ];
    }
}