# frozen_string_literal: true

module CommitSignature
  extend ActiveSupport::Concern

  included do
    include ShaAttribute
    include EachBatch

    sha_attribute :commit_sha

    enum :verification_status, Enums::CommitSignature.verification_statuses

    belongs_to :project, class_name: 'Project', foreign_key: 'project_id', optional: false

    validates :commit_sha, presence: true
    validates :project_id, presence: true

    scope :by_commit_sha, ->(shas) { where(commit_sha: shas) }
    scope :by_commit_shas_and_project_ids, ->(shas, project_ids) { where(commit_sha: shas, project_id: project_ids) }
  end

  class_methods do
    def safe_create!(attributes)
      create_with(attributes)
        .safe_find_or_create_by!(commit_sha: attributes[:commit_sha])
    end

    # Find commits that are lacking a signature in the database at present
    def unsigned_commit_shas(commit_shas)
      return [] if commit_shas.empty?

      signed = by_commit_sha(commit_shas).pluck(:commit_sha)
      commit_shas - signed
    end
  end

  def commit
    project.commit(commit_sha)
  end

  def signed_by_user
    raise NoMethodError, 'must implement `signed_by_user` method'
  end

  def verified_committer?
    verified? || verified_system?
  end

  # If commit is persisted as verified, check that commit email is still correct.
  def verification_status
    persisted_status = read_attribute(:verification_status)
    return persisted_status unless verified? || verified_system?
    return persisted_status unless commit

    return 'unverified_author_email' unless verified_email?(commit.committer_email)

    persisted_status
  end

  private

  def verified_email?(email)
    return false unless email

    emails = emails_for_verification
    # nil: key/user deleted, we cannot verify emails so skip check
    return true if emails.nil?
    # empty array: user exists but has no verified emails
    return false if emails.empty?

    emails.map(&:downcase).include?(email.downcase)
  end

  def emails_for_verification
    return User.find_by_any_email(committer_email, confirmed: true)&.verified_emails if verified_system?

    signed_by_user&.verified_emails
  end
end

CommitSignature.prepend_mod
