using System;
using System.Collections.Generic;
using System.Configuration;
using System.Linq;
using System.ServiceModel.Channels;
using System.ServiceModel.Dispatcher;
using System.ServiceModel;
using System.Text;
using System.Threading.Tasks;
using BeWo.Data;

namespace BeWo.Service.ServiceBehavior
{
	public class AdminServiceMessageInspector : IDispatchMessageInspector
	{
		public object AfterReceiveRequest(ref Message request, IClientChannel channel, InstanceContext instanceContext)
		{
			// Hole die erlaubte IP aus den appSettings
			string allowedIP = ConfigurationManager.AppSettings["AdminServiceIPAddress"];

			// Extrahiere die RemoteEndpoint-IP-Adresse
			string remoteIP = request.Properties.ContainsKey(RemoteEndpointMessageProperty.Name)
				? ((RemoteEndpointMessageProperty)request.Properties[RemoteEndpointMessageProperty.Name]).Address
				: null;

			// Vergleiche die IPs
			if (remoteIP == null || !string.Equals(remoteIP, allowedIP, StringComparison.OrdinalIgnoreCase))
			{
				throw new UnauthorizedAccessException($"Zugriff verweigert. Remote IP ({remoteIP ?? "Unbekannt"}) ist nicht erlaubt.");
			}

			// Hole erlaubten API Key aus den appSettings
			string allowedApikey = ConfigurationManager.AppSettings["AdminServiceAPIKey"];

			// Extrahiert den API Key von Remote
			var prop = (HttpRequestMessageProperty)request.Properties[HttpRequestMessageProperty.Name];
			var remoteApikey = prop?.Headers["admin-service-api-key"];

			// Vergleicht die API Keys
			if(remoteApikey == null || !string.Equals(remoteApikey, allowedApikey, StringComparison.Ordinal))
			{
				throw new UnauthorizedAccessException($"Zugriff verweigert. API Key ({remoteApikey ?? "Unbekannt"}) ist nicht erlaubt.");
			}

			return null; // Keine Zustandsinformationen erforderlich
		}

		public void BeforeSendReply(ref Message reply, object correlationState)
		{
			// Keine zusätzliche Logik erforderlich vor dem Senden der Antwort
		}
	}
}