import { NextRequest, NextResponse } from "next/server";

import {
  AUTH_USER_ID,
  CLAIM_NAME,
  PORT,
  PROXY_HOST,
  SERVER_API_URL,
  SITE_ID,
} from "@/shared/config";

const serverApiUrl = process.env.SERVER_API_URL;
const dcServiceApiUrl = process.env.DC_SERVICE_API_URL;

// CSP 헤더 설정 함수 (img-src만)
function addSecurityHeaders(response: NextResponse): NextResponse {
  response.headers.set("Content-Security-Policy", "img-src 'self' data: https: blob:;");
  return response;
}

export function middleware(req: NextRequest) {
  const pathname = req.nextUrl.pathname;
  const searchParams = req.nextUrl.searchParams;

  const logMessages: string[] = [
    `[Middleware Request] ${new Date().toISOString()}`,
    `[Environment]\n  Mode: ${process.env.NODE_ENV}\n  Port: ${PORT}\n  Proxy Host: ${PROXY_HOST}\n  Server API URL: ${SERVER_API_URL}\n  Site ID: ${SITE_ID}`,
    `[Request]\n  Original Pathname: ${pathname}`,
  ];

  if (pathname.startsWith("/server")) {
    const queryParams = searchParams.toString();

    let serverUrl: string | undefined;
    if (pathname.includes("/dc-service")) {
      serverUrl = dcServiceApiUrl;
    } else {
      serverUrl = serverApiUrl;
    }

    const newUrl = `${serverUrl}${pathname.replace("/server", "")}${
      queryParams ? `?${queryParams}` : ""
    }`;

    logMessages.push(`  Rewritten URL: ${newUrl}`);
    logMessages.push("\n--------------------------------\n");
    console.log(logMessages.join("\n"));

    const response = NextResponse.rewrite(new URL(newUrl));
    return addSecurityHeaders(response);
  }

  // tus-js-client PATCH 요청: Location 헤더로 /server 없이 반환된 경로 직접 처리
  // (예: /attach-service/api/v1/tus/upload/{id})
  if (pathname.startsWith("/attach-service")) {
    const requestHeaders = new Headers(req.headers);
    const token = req.cookies.get(CLAIM_NAME)?.value;
    const userId = req.cookies.get(AUTH_USER_ID)?.value;
    const newUrl = `${serverApiUrl}${pathname}`;

    if (token) requestHeaders.set(CLAIM_NAME, token);
    if (userId) requestHeaders.set(AUTH_USER_ID, userId);

    logMessages.push(`  [TUS Proxy] Rewritten URL: ${newUrl}`);
    logMessages.push("\n--------------------------------\n");
    console.log(logMessages.join("\n"));

    const response = NextResponse.rewrite(new URL(newUrl), {
      headers: requestHeaders,
    });
    return addSecurityHeaders(response);
  }

  if (pathname === "/") {
    const response = NextResponse.redirect(new URL("/dashboard", req.url));
    return response;
  }

  logMessages.push("\n--------------------------------\n");
  console.log(logMessages.join("\n"));

  const response = NextResponse.next();
  return addSecurityHeaders(response);
}

export const config = {
  matcher: ["/server/:path*", "/attach-service/:path*", "/"],
};