package general

import (
	"encoding/base64"
	"encoding/json"
	"fmt"
	"net"
	"net/url"
	"strconv"
	"strings"

	"github.com/perfect-panel/server/pkg/adapter/proxy"
)

type v2rayShareLink struct {
	Ps            string `json:"ps"`
	Add           string `json:"add"`
	Port          string `json:"port"`
	ID            string `json:"id"`
	Aid           string `json:"aid"`
	Net           string `json:"net"`
	Type          string `json:"type"`
	Host          string `json:"host"`
	SNI           string `json:"sni"`
	Path          string `json:"path"`
	TLS           string `json:"tls"`
	Flow          string `json:"flow,omitempty"`
	Alpn          string `json:"alpn,omitempty"`
	AllowInsecure bool   `json:"allowInsecure"`
	Fingerprint   string `json:"fp,omitempty"`
	PublicKey     string `json:"pbk,omitempty"`
	ShortId       string `json:"sid,omitempty"`
	SpiderX       string `json:"spx,omitempty"`
	V             string `json:"v"`
}

// GenerateBase64General  will output node URLs split by '\n' and then encode into base64
func GenerateBase64General(data []proxy.Proxy, uuid string) []byte {
	var links []string
	for _, v := range data {
		p := buildProxy(v, uuid)
		if p == "" {
			continue
		}
		links = append(links, p)
	}
	var rsp []byte
	rsp = base64.RawStdEncoding.AppendEncode(rsp, []byte(strings.Join(links, "\r\n")))
	return rsp
}

func buildProxy(data proxy.Proxy, uuid string) string {
	switch data.Protocol {
	case "shadowsocks":
		return ShadowsocksUri(data, uuid)
	case "vmess":
		return VmessUri(data, uuid)
	case "vless":
		return VlessUri(data, uuid)
	case "trojan":
		return TrojanUri(data, uuid)
	case "hysteria2":
		return Hysteria2Uri(data, uuid)
	case "tuic":
		return TuicUri(data, uuid)
	case "anytls":
		return AnyTLSUri(data, uuid)
	default:
		return ""
	}
}

func ShadowsocksUri(data proxy.Proxy, uuid string) string {
	ss, ok := data.Option.(proxy.Shadowsocks)
	if !ok {
		return ""
	}

	password := uuid
	// SIP022 AEAD-2022 Ciphers
	if strings.Contains(ss.Method, "2022") {
		serverKey, userKey := proxy.GenerateShadowsocks2022Password(ss, uuid)
		password = fmt.Sprintf("%s:%s", serverKey, userKey)
	}

	u := &url.URL{
		Scheme:   "ss",
		User:     url.User(strings.TrimSuffix(base64.URLEncoding.EncodeToString([]byte(ss.Method+":"+password)), "=")),
		Host:     net.JoinHostPort(data.Server, strconv.Itoa(data.Port)),
		Fragment: data.Name,
	}
	return u.String()
}

func VmessUri(data proxy.Proxy, uuid string) string {
	vmess := data.Option.(proxy.Vmess)

	transport := vmess.TransportConfig

	securityConfig := vmess.SecurityConfig

	var s = v2rayShareLink{
		V:    "2",
		Add:  data.Server,
		Port: fmt.Sprint(data.Port),
		ID:   uuid,
		Aid:  "0",
		Ps:   data.Name,
		Net:  "tcp",
	}

	switch vmess.Transport {
	case "websocket":
		s.Net = "ws"
		s.Path = transport.Path
		s.Host = transport.Host
	case "grpc":
		s.Net = "grpc"
		s.Path = transport.ServiceName
	case "httpupgrade":
		s.Net = "http"
		s.Path = transport.Path
		s.Host = transport.Host
	}

	if vmess.Security == "tls" {
		s.TLS = "tls"
		s.SNI = securityConfig.SNI
		s.AllowInsecure = securityConfig.AllowInsecure
		s.Fingerprint = securityConfig.Fingerprint
	}
	b, _ := json.Marshal(s)
	return "vmess://" + strings.TrimSuffix(base64.StdEncoding.EncodeToString(b), "=")
}

func VlessUri(data proxy.Proxy, uuid string) string {
	vless := data.Option.(proxy.Vless)
	transportConfig := vless.TransportConfig
	securityConfig := vless.SecurityConfig

	var query = make(url.Values)
	setQuery(&query, "flow", vless.Flow)
	setQuery(&query, "security", vless.Security)
	setQuery(&query, "encryption", "none")

	switch vless.Transport {
	case "websocket":
		setQuery(&query, "type", "ws")
		setQuery(&query, "host", transportConfig.Host)
		setQuery(&query, "path", transportConfig.Path)

	case "http2", "httpupgrade":
		setQuery(&query, "type", "http")
		setQuery(&query, "path", transportConfig.Path)
		setQuery(&query, "host", transportConfig.Host)
	case "grpc":
		setQuery(&query, "type", "grpc")
		setQuery(&query, "serviceName", transportConfig.ServiceName)
	}

	if vless.Security == "tls" {
		setQuery(&query, "sni", securityConfig.SNI)
		setQuery(&query, "fp", securityConfig.Fingerprint)
	} else if vless.Security == "reality" {
		setQuery(&query, "pbk", securityConfig.RealityPublicKey)
		setQuery(&query, "sid", securityConfig.RealityShortId)
		setQuery(&query, "sni", securityConfig.SNI)
		setQuery(&query, "fp", securityConfig.Fingerprint)
		setQuery(&query, "servername", securityConfig.SNI)
		setQuery(&query, "spx", "/")

	}

	u := url.URL{
		Scheme:   "vless",
		User:     url.User(uuid),
		Host:     net.JoinHostPort(data.Server, fmt.Sprint(data.Port)),
		RawQuery: query.Encode(),
		Fragment: data.Name,
	}
	return u.String()
}

func TrojanUri(data proxy.Proxy, uuid string) string {
	trojan := data.Option.(proxy.Trojan)
	transportConfig := trojan.TransportConfig
	securityConfig := trojan.SecurityConfig

	var query = make(url.Values)
	setQuery(&query, "security", trojan.Security)

	switch trojan.Transport {
	case "websocket":
		setQuery(&query, "type", "ws")
		setQuery(&query, "path", transportConfig.Path)
		setQuery(&query, "host", transportConfig.Host)
	case "grpc":
		setQuery(&query, "type", "grpc")
		setQuery(&query, "serviceName", transportConfig.ServiceName)
	default:
		setQuery(&query, "type", "tcp")
		setQuery(&query, "path", transportConfig.Path)
		setQuery(&query, "host", transportConfig.Host)
	}

	if securityConfig.AllowInsecure {
		setQuery(&query, "allowInsecure", "1")
	}

	u := &url.URL{
		Scheme:   "trojan",
		User:     url.User(uuid),
		Host:     net.JoinHostPort(data.Server, strconv.Itoa(data.Port)),
		RawQuery: query.Encode(),
		Fragment: data.Name,
	}
	return u.String()
}

func Hysteria2Uri(data proxy.Proxy, uuid string) string {
	hysteria2 := data.Option.(proxy.Hysteria2)

	var query = make(url.Values)

	setQuery(&query, "sni", hysteria2.SecurityConfig.SNI)

	if hysteria2.SecurityConfig.AllowInsecure {
		setQuery(&query, "insecure", "1")
	}

	if hp := strings.TrimSpace(hysteria2.HopPorts); hp != "" {
		setQuery(&query, "mport", hp)
	}

	if hysteria2.ObfsPassword != "" {
		setQuery(&query, "obfs", "salamander")
		setQuery(&query, "obfs-password", hysteria2.ObfsPassword)
	}

	u := &url.URL{
		Scheme:   "hysteria2",
		User:     url.User(uuid),
		Host:     net.JoinHostPort(data.Server, strconv.Itoa(data.Port)),
		RawQuery: query.Encode(),
		Fragment: data.Name,
	}
	return u.String()
}

func TuicUri(data proxy.Proxy, uuid string) string {
	tuic := data.Option.(proxy.Tuic)
	var query = make(url.Values)

	setQuery(&query, "congestion_control", tuic.CongestionController)
	setQuery(&query, "udp_relay_mode", tuic.UDPRelayMode)

	if tuic.SecurityConfig.SNI != "" {
		setQuery(&query, "sni", tuic.SecurityConfig.SNI)
	} else {
		setQuery(&query, "disable_sni", "1")
	}
	if tuic.SecurityConfig.AllowInsecure {
		setQuery(&query, "allow_insecure", "1")
	}

	u := &url.URL{
		Scheme:   "tuic",
		User:     url.User(uuid + ":" + uuid),
		Host:     net.JoinHostPort(data.Server, strconv.Itoa(data.Port)),
		RawQuery: query.Encode(),
		Fragment: data.Name,
	}
	return u.String()
}

func AnyTLSUri(data proxy.Proxy, uuid string) string {
	anytls, ok := data.Option.(proxy.AnyTLS)
	if !ok {
		return ""
	}

	securityConfig := anytls.SecurityConfig
	var query = make(url.Values)

	// 根据AnyTLS官方URI规范实现
	// 格式: anytls://[auth@]hostname[:port]/?[key=value]&[key=value]...

	// TLS配置
	setQuery(&query, "sni", securityConfig.SNI)

	// 是否允许不安全连接
	if securityConfig.AllowInsecure {
		setQuery(&query, "insecure", "1")
	}

	u := url.URL{
		Scheme:   "anytls",
		User:     url.User(uuid),
		Host:     net.JoinHostPort(data.Server, strconv.Itoa(anytls.Port)),
		RawQuery: query.Encode(),
		Fragment: data.Name,
	}
	return u.String()
}

func setQuery(q *url.Values, k, v string) {
	if v != "" {
		q.Set(k, v)
	}
}