/**
 * @swagger
 * /api/endpoint/getemailaccountcheck_api:
 *   get:
 *     tags: [Login]
 *     description: Returns portal login
 *     summary: Phase 2
 *     parameters:
 *       - name: emailAddress
 *         in: query
 *         required: true
 *         schema:
 *           type: string
 *     responses:
 *       200:
 *         description: hello world
 */
import axios from "axios";
import CryptoJS from "crypto-js";
import _ from "lodash";
import { azureHeaders } from "../../../actions/core/headers";
import {
    escapeODataString,
    isNonEmptyString,
    sanitizeString
} from "../../../actions/core/guards";
import { consoleLogger, redactSensitive } from "../../../actions/core/logger";
import { getToken } from "../../../actions/core/token";

const WORDKEY = process.env.HASHKEY;

const WEBAPI_URL =
    process.env.RELAY_ROOT ||
    "https://dev-pedw-ns.servicebus.windows.net/dev-pedw-hc/";

const hashAPIPath = (queryPath) => {
    var hashlink = CryptoJS.HmacSHA256(
        queryPath,
        CryptoJS.enc.Hex.parse(WORDKEY)
    );
    hashlink = hashlink.toString(CryptoJS.enc.Hex);
    return (queryPath.indexOf("?") > -1 ? "&hash=" : "?hash=") + hashlink;
};

export default async function ApiProxy(req, res) {
    var emailAddress = sanitizeString(req.query.emailAddress);
    var token = await getToken();

    if (!isNonEmptyString(emailAddress)) {
        return res.status(400).json({ error: "emailAddress is required" });
    }

    var queryUrl =
        "contacts?$filter=emailaddress1 eq '" +
        escapeODataString(emailAddress) +
        "'&$count=true&$select=pinswg_preferredlanguage,contactid";

    console.log(redactSensitive(queryUrl));
    // var queryUrl = "contacts/?$count=true&$select=emailaddress1, contactid";

    var apiResponse = _.isEmpty(req.query)
        ? res.status(400).json()
        : typeof emailAddress != "undefined" && emailAddress.length > 0
          ? axios
                .get(
                    WEBAPI_URL + queryUrl + hashAPIPath(queryUrl),
                    azureHeaders(token.access_token)
                )
                .then(({ data }) => {
                    res.status(200).json(data);
                })
                .catch((error) => {
                    consoleLogger(error);
                    res.status(400).json(error);
                })
          : res.status(400).json();

    return apiResponse;
}