#import "TouchIDAuthentication.h"
#import <LocalAuthentication/LocalAuthentication.h>
#import "KKPasscodeLock.h"
#import "BundleUtil.h"
#import "ThreemaFramework/ThreemaFramework-Swift.h"
#import "ThreemaError.h"

#ifdef DEBUG
  static const DDLogLevel ddLogLevel = DDLogLevelVerbose;
#else
  static const DDLogLevel ddLogLevel = DDLogLevelWarning;
#endif
@implementation TouchIDAuthentication

+ (void)tryTouchIDAuthenticationCallback:(void(^)(BOOL success, NSError *error, NSData * data))callback {
    if (![[KKPasscodeLock sharedLock] isTouchIdOn]) {
        // The callback must always run, otherwise awaiting callers are suspended forever
        callback(NO, [NSError errorWithDomain:LAErrorDomain code:LAErrorBiometryNotAvailable userInfo:nil], nil);
        return;
    }

    LAContext *context = [LAContext new];
    NSError *error;
    if ([context canEvaluatePolicy:LAPolicyDeviceOwnerAuthenticationWithBiometrics error:&error]) {
        NSString *reason = [NSString stringWithFormat:[BundleUtil localizedStringForKey:@"to_unlock_passcode"], TargetManagerObjC.appName];
        [context evaluatePolicy:LAPolicyDeviceOwnerAuthenticationWithBiometrics localizedReason:reason reply:^(BOOL success, NSError *error) {
            // If we encounter an error, we directly return it.
            if (error != nil) {
                callback(success,error, nil);
                return;
            }
            
            // We safe the policy the first time
            if ([AppGroup getCurrentType] == AppGroupTypeApp && [[UserSettings sharedUserSettings] evaluatedPolicyDomainStateApp] == nil) {
                [[UserSettings sharedUserSettings] setEvaluatedPolicyDomainStateApp:context.evaluatedPolicyDomainState];
                callback(success, error, nil);
                return;
            }
            else if ([AppGroup getCurrentType] == AppGroupTypeShareExtension && [[UserSettings sharedUserSettings] evaluatedPolicyDomainStateShareExtension] == nil) {
                [[UserSettings sharedUserSettings] setEvaluatedPolicyDomainStateShareExtension:context.evaluatedPolicyDomainState];
                callback(success, error, nil);
                return;
            }
            
            if ([AppGroup getCurrentType] == AppGroupTypeApp && ![[[UserSettings sharedUserSettings] evaluatedPolicyDomainStateApp] isEqualToData: context.evaluatedPolicyDomainState]) {
                DDLogWarn(@"[Passcode] Biometrics have possibly changed. Passcode needed in App.");
                callback(nil, [ThreemaError threemaError:@"Biometrics have possibly changed."], context.evaluatedPolicyDomainState);
                return;
            }
            else if ([AppGroup getCurrentType] == AppGroupTypeShareExtension && ![[[UserSettings sharedUserSettings] evaluatedPolicyDomainStateShareExtension] isEqualToData: context.evaluatedPolicyDomainState]) {
                DDLogWarn(@"[Passcode] Biometrics have possibly changed. Passcode needed in ShareExtension.");
                callback(nil, [ThreemaError threemaError:@"Biometrics have possibly changed."], context.evaluatedPolicyDomainState);
                return;
            }
            
            callback(success, error, nil);
        }
        ];
    }
    
    else {
        DDLogError(@"Touch ID evaluation error: %@", error);
        callback(NO, error ?: [NSError errorWithDomain:LAErrorDomain code:LAErrorBiometryNotAvailable userInfo:nil], nil);
    }
}

+ (BOOL)requiresPasscodeAfterError:(NSError *)error {
    if (![error.domain isEqualToString:LAErrorDomain]) {
        return NO;
    }

    switch (error.code) {
        case LAErrorUserFallback:
        case LAErrorAuthenticationFailed:
        case LAErrorBiometryLockout:
            return YES;
        default:
            return NO;
    }
}

@end