<?php namespace App\Http\Middleware;
/**
 * Copyright 2015 OpenStack Foundation
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * http://www.apache.org/licenses/LICENSE-2.0
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 **/
use App\Models\ResourceServer\IApiEndpointRepository;
use App\Models\ResourceServer\IEndpointRateLimitByIPRepository;
use Closure;
use Illuminate\Cache\RateLimiter;
use Illuminate\Routing\Middleware\ThrottleRequests;
use libs\utils\RequestUtils;

/**
 * Class RateLimitMiddleware
 * @package App\Http\Middleware
 */
final class RateLimitMiddleware extends ThrottleRequests
{

    /**
     * @var IApiEndpointRepository
     */
    private $endpoint_repository;

    /**
     * @var IEndpointRateLimitByIPRepository
     */
    private $endpoint_rate_limit_by_ip_repository;

    /**
     * RateLimitMiddleware constructor.
     * @param IApiEndpointRepository $endpoint_repository
     * @param IEndpointRateLimitByIPRepository $endpoint_rate_limit_by_ip_repository
     * @param RateLimiter $limiter
     */
    public function __construct
    (
        IApiEndpointRepository $endpoint_repository,
        IEndpointRateLimitByIPRepository $endpoint_rate_limit_by_ip_repository,
        RateLimiter $limiter
    )
    {
        parent::__construct($limiter);
        $this->endpoint_repository                  = $endpoint_repository;
        $this->endpoint_rate_limit_by_ip_repository = $endpoint_rate_limit_by_ip_repository;
    }

    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @param  int|string  $maxAttempts
     * @param  float|int  $decayMinutes
     * @param  string  $prefix
     * @return \Symfony\Component\HttpFoundation\Response
     *
     * @throws \Illuminate\Http\Exceptions\ThrottleRequestsException
     */
    public function handle($request, Closure $next, $maxAttempts = 60, $decayMinutes = 1, $prefix = '')
    {
        $route     = RequestUtils::getCurrentRoutePath($request);
        $method    = $request->getMethod();
        $endpoint  = $this->endpoint_repository->getApiEndpointByUrlAndMethod($route, $method);
        $key       = $this->resolveRequestSignature($request);
        $client_ip = $request->getClientIp();

        if (!is_null($endpoint) && $endpoint->getRateLimit() > 0) {
            $maxAttempts = $endpoint->getRateLimit();
        }

        if (!is_null($endpoint) && $endpoint->getRateLimitDecay() > 0) {
            $decayMinutes = $endpoint->getRateLimitDecay();
        }

        $endpoint_rate_limit_by_ip = $this->endpoint_rate_limit_by_ip_repository->getByIPRouteMethod
        (
            $client_ip,
            $route,
            $method
        );

        if(!is_null($endpoint_rate_limit_by_ip)){
            $maxAttempts  = $endpoint_rate_limit_by_ip->getRateLimit();
            $decayMinutes = $endpoint_rate_limit_by_ip->getRateLimitDecay();
        }

        if ($maxAttempts == 0 || $decayMinutes == 0) {
            // short circuit (infinite)
            return $next($request);
        }

        if ($this->limiter->tooManyAttempts($key, $maxAttempts)) {
            throw $this->buildException($key, $maxAttempts);
        }

        $this->limiter->hit($key, $decayMinutes);

        $response = $next($request);

        return $this->addHeaders(
            $response, $maxAttempts,
            $this->calculateRemainingAttempts($key, $maxAttempts)
        );
    }
}