'use strict';

const secretIsValid = require('./secret-is-valid');
const serverSecrets = require('../server-secrets');
const config = require('../server-config');
const RateLimit = require('./rate-limit');
const log = require('../log');

function secretInvalid(req, res) {
  if (!secretIsValid(req.password)) {
    // An unknown entity tries to connect. Let the connection linger for a minute.
    setTimeout(function() {
      res.json({errors: [{code: 'invalid_secrets'}]});
    }, 10000);
    return true;
  }
  return false;
}

function setRoutes(server) {
  const ipRateLimit = new RateLimit({
    whitelist: /^192\.30\.252\.\d+$/, // Whitelist GitHub IPs.
  });
  const badgeTypeRateLimit = new RateLimit({maxHitsPerPeriod: 3000});
  const refererRateLimit = new RateLimit({
    maxHitsPerPeriod: 300,
    whitelist: /^https?:\/\/shields\.io\/$/,
  });

  server.handle(function monitorHandler(req, res, next) {
    if (req.url.startsWith('/sys/')) {
      if (secretInvalid(req, res)) { return; }
    }

    if (config.rateLimit) {
      const ip = (req.headers['x-forwarded-for'] || '').split(', ')[0]
        || req.socket.remoteAddress;
      const badgeType = req.url.split(/[/-]/).slice(0, 3).join('');
      const referer = req.headers['referer'];

      if (ipRateLimit.isBanned(ip, req, res)) { return; }
      if (badgeTypeRateLimit.isBanned(badgeType, req, res)) { return; }
      if (refererRateLimit.isBanned(referer, req, res)) { return; }
    }

    next();
  });

  server.get('/sys/network', (req, res) => {
    res.json({ips: serverSecrets.shieldsIps});
  });

  server.ws('/sys/logs', socket => {
    const listener = (...msg) => socket.send(msg.join(' '));
    socket.on('close', () => log.removeListener(listener));
    socket.on('message', msg => {
      let req;
      try {
        req = JSON.parse(msg);
      } catch(e) { return; }
      if (!secretIsValid(req.secret)) {
        return socket.close();
      }
      log.addListener(listener);
    });
  });

  server.get('/sys/rate-limit', (req, res) => {
    res.json({
      ip: ipRateLimit.toJSON(),
      badgeType: badgeTypeRateLimit.toJSON(),
      referer: refererRateLimit.toJSON(),
    })
  });
}

module.exports = {
  setRoutes,
};