-- This file is part of the Wire Server implementation.
--
-- Copyright (C) 2022 Wire Swiss GmbH <opensource@wire.com>
--
-- This program is free software: you can redistribute it and/or modify it under
-- the terms of the GNU Affero General Public License as published by the Free
-- Software Foundation, either version 3 of the License, or (at your option) any
-- later version.
--
-- This program is distributed in the hope that it will be useful, but WITHOUT
-- ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
-- FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
-- details.
--
-- You should have received a copy of the GNU Affero General Public License along
-- with this program. If not, see <https://www.gnu.org/licenses/>.

module CargoHold.Util where

import CargoHold.API.AuditLog
import CargoHold.AWS
import CargoHold.App
import qualified CargoHold.CloudFront as CloudFront
import CargoHold.Options
import CargoHold.S3 (S3AssetMeta)
import qualified CargoHold.S3 as S3
import qualified CargoHold.Types as V3
import Data.ByteString.Conversion
import Data.Domain (Domain)
import Data.Qualified (Qualified)
import Imports
import URI.ByteString hiding (urlEncode)

genSignedURL :: (ToByteString p) => Maybe (Qualified V3.Principal) -> Maybe S3AssetMeta -> p -> Maybe Domain -> Handler URI
genSignedURL quid mMeta path mbHost = do
  uri <-
    asks (.aws.cloudFront) >>= \case
      Nothing -> S3.signedURL path mbHost
      Just cf -> CloudFront.signedURL cf path
  whenM (asks (.options.settings.assetAuditLogEnabled)) $
    logSignedURLCreation quid mMeta uri
  pure $! uri
