@RequiredArgsConstructor
@Controller
public class AuthController {

    private final AuthService authService;

    @PostMapping("/asd")
    public ResponseEntity<Void> login() {
        LoginRequest loginRequest = new LoginRequest("dang", "aaaa1111@");
        LoginResponse response = authService.login(loginRequest);
        
        
        ResponseCookie accessCookie = CookieUtils.createCookie("access_token", response.accessToken(), Duration.ofMinutes(30), false);
        ResponseCookie refreshCookie = CookieUtils.createCookie("refresh_token", response.refreshToken(), Duration.ofDays(7), true);

        return ResponseEntity.ok()
                .header(HttpHeaders.SET_COOKIE, accessCookie.toString())
                .header(HttpHeaders.SET_COOKIE, refreshCookie.toString())
                .build();
    }
}

@Service
@RequiredArgsConstructor
public class AuthServiceImpl implements AuthService {

    private final AuthClient authClient;

    @Override
    public LoginResponse login(LoginRequest request) {
        ResponseEntity response = authClient.login(request);
        LoginResponse tokenDto = (LoginResponse) response.getBody();

        return tokenDto;
    }
}

@FeignClient(name = "gateway", url = "localhost:8081")
public interface AuthClient {
    @PostMapping("/user-service/api/auth/login")
    ResponseEntity<LoginResponse> login(@RequestBody LoginRequest request);

}

@Component
public class RouteValidator {

    public static final List<String> openApiEndpoints = List.of(
            "/eureka",
            "/coupon/api/v1/coupon/issued-check/",
            "/auth/api/register",
            "/auth/api/login"
    );

    public Predicate<ServerHttpRequest> isSecured =
            request -> openApiEndpoints
                    .stream()
                    .noneMatch(uri -> request.getURI().getPath().contains(uri));

}

// Global Filter 적용
@Component
@Slf4j
public class AuthenticationFilter extends AbstractGatewayFilterFactory<AuthenticationFilter.Config> {

    @Autowired
    private RouteValidator validator;

    @Autowired
    private JwtUtil jwtUtil;

    public AuthenticationFilter() {
        super(Config.class);
    }

    @Override
    public GatewayFilter apply(Config config) {
        // pre
        return (exchange, chain) -> {
            ServerHttpRequest request = exchange.getRequest();

            if (validator.isSecured.test(request)) {
            	// JWT 검증 로직
                List<String> authHeaders = request.getHeaders().get(HttpHeaders.AUTHORIZATION);

                if (authHeaders == null || authHeaders.isEmpty()) {
                    throw new MissingAuthorizationHeaderException();
                }

                String authHeader = authHeaders.get(0);

                if (authHeader.startsWith("Bearer ")) {
                    String token = authHeader.substring(7);

                    try {
                        jwtUtil.validateToken(token);
                    } catch (Exception e) {
                        throw new UnauthorizedAccessException();
                    }
                } else {
                    throw new InvalidAuthorizationHeaderFormatException();
                }
            }

            // post
            return chain.filter(exchange).then(Mono.fromRunnable(() -> {
                ServerHttpResponse response = exchange.getResponse();
                log.info("Custom Post filter: response code: " + response.getStatusCode());
            }));
        };
    }

    @Data
    public static class Config {
        private String baseMessage;
        private boolean preLogger;
        private boolean postLogger;
    }
}