use Symfony\Component\Form\AbstractType;
use Symfony\Component\Form\CallbackTransformer;
use Symfony\Component\Form\Exception\TransformationFailedException;
use Symfony\Component\Form\Extension\Core\Type\PasswordType;
use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
use Symfony\Component\Form\FormBuilderInterface;
use Symfony\Component\OptionsResolver\OptionsResolver;
use function array_merge;
use function gettype;
use function is_string;
use function sodium_memzero;

final class HashedPasswordType extends AbstractType
{
    public function buildForm(FormBuilderInterface $builder, array $options): void
    {
        $passwordOptions = $options['password_options'] + ['required' => $options['required']];
        $passwordOptions['attr'] = array_merge(
            $passwordOptions['attr'] ?? [],
            [
                'autocomplete' => 'off',
                'autocorrect' => 'off',
                'autocapitalize' => 'off',
                'spellcheck' => 'false',
            ]
        );

        if ($options['password_confirm']) {
            $builder->add(
                'password',
                RepeatedType::class,
                [
                    'type' => PasswordType::class,
                    'invalid_message' => 'password_not_the_same',
                    'first_options' => ['label' => 'label.password'],
                    'second_options' => ['label' => 'label.password2'],
                ] + $passwordOptions
            );
        } else {
            $builder->add('password', PasswordType::class, $passwordOptions);
        }

        $encoder = $options['algorithm'];
        $builder->get('password')->addModelTransformer(
            new CallbackTransformer(
                // Password is always null (as by convention)
                function () {
                    return null;
                },
                function ($value) use ($encoder): ?string {
                    if ($value === null) {
                        return null;
                    }

                    if (! is_string($value)) {
                        throw new TransformationFailedException('Expected string got "' . gettype($value) . '"');
                    }

                    $encodePassword = $encoder($value);
                    sodium_memzero($value); // Recommended but not required (requires Libsodium v2).

                    return $encodePassword;
                }
            )
        );
    }

    public function configureOptions(OptionsResolver $resolver): void
    {
        $resolver->setRequired(['algorithm']);
        $resolver->setDefaults([
            'inherit_data' => true,
            'password_options' => [],
            'password_confirm' => false,
        ]);

        $resolver->setAllowedTypes('algorithm', 'callable');
        $resolver->setAllowedTypes('password_options', ['array']);
        $resolver->setAllowedTypes('password_confirm', ['bool']);
    }
}