package auth

import (
	"fmt"

	"github.com/go-openapi/runtime"
	"github.com/go-openapi/strfmt"
	"github.com/pkg/errors"
)

// Auth0ClientAuth write JWT token from Auth0 to request headers,
// which implements go-openapi's ClientAuthInfoWriter interface
type Auth0ClientAuth struct {
	Domain       string
	ClientID     string
	ClientSecret string
	Audience     string
}

func New(domain string, clientId string, clientSecret string, audience string) *Auth0ClientAuth {
	return &Auth0ClientAuth{
		Domain:       domain,
		ClientID:     clientId,
		ClientSecret: clientSecret,
		Audience:     audience,
	}
}

func (c *Auth0ClientAuth) AuthenticateRequest(req runtime.ClientRequest, _ strfmt.Registry) error {
	token, err := GetClientToken(c.Domain, c.ClientID, c.ClientSecret, c.Audience)
	if err != nil {
		return errors.Wrap(err, "set auth")
	}
	return req.SetHeaderParam("Authorization", fmt.Sprintf("bearer %s", token))
}