//
// Copyright (C) Microsoft. All rights reserved.
//
/// <disable>JS2085.EnableStrictMode</disable>
"use strict";
var CloudExperienceHost;
(function (CloudExperienceHost) {
    (function (CloudDomain) {
        function _getCloudDomainWorker() {
            if (!CloudDomain.hasOwnProperty("cloudDomainJoinWorker")) {
                CloudDomain.cloudDomainJoinWorker = new CloudDomainJoin.DataModel.CloudDomainJoinWorker();
            }
            return CloudDomain.cloudDomainJoinWorker;
        }

        var commonFeatures = [];
        function getCommonFeatures(allServerFeatures) {
            var allClientFeatures = [
                "JoinResultObject",
                "NativeGetPolicy",
                // Add more here as the client supports them.
            ];

            commonFeatures = allClientFeatures.filter(feature => allServerFeatures.includes(feature));
            return commonFeatures;
        }
        CloudDomain.getCommonFeatures = getCommonFeatures;

        function isErrorClassNotReg(error) {
            if (error.hasOwnProperty("number") && ((error.number >>> 0) === 0x80040154)) {
                // REGDB_E_CLASSNOTREG
                return true;
            }
            return false;
        }

        function getPolicyString(policyName) {
            try {
                return EnterpriseDeviceManagement.Service.AutoPilot.AutoPilotUtilStatics.getStringPolicyAsync(policyName);
            } catch (e) {
                if (isErrorClassNotReg(e)) {
                    return "";
                }
                
                CloudExperienceHost.Telemetry.WebAppTelemetry.getInstance().logEvent("CDJUIGetPolicyStringFailure", JSON.stringify({objectType: e && e.toString(), status: e.status && e.status.toString()}));
                throw e;
            }
        }
        CloudDomain.getPolicyString = getPolicyString;

        // autoPilotOobeSetting is a value from the EnterpriseDeviceManagement.Enrollment.AutoPilotOobeSetting enumeration
        function getPolicyBool(autoPilotOobeSetting) {
            try {
                return EnterpriseDeviceManagement.Service.AutoPilot.AutoPilotUtilStatics.getOobeSettingsOverrideAsync(autoPilotOobeSetting);
            } catch (e) {
                if (isErrorClassNotReg(e)) {
                    return false;
                }

                CloudExperienceHost.Telemetry.WebAppTelemetry.getInstance().logEvent("CDJUIGetPolicyBoolFailure", JSON.stringify({objectType: e && e.toString(), status: e.status && e.status.toString()}));
                throw e;
            }
        }
        CloudDomain.getPolicyBool = getPolicyBool;

        // BEGIN: remove once PROD has serverFeature "NativeGetPolicy"
        CloudDomain.getCloudAssignedTenantDomain        = function () { return getPolicyString("CloudAssignedTenantDomain"); };
        CloudDomain.getCloudAssignedForceStandardUser   = function () { return getPolicyBool(EnterpriseDeviceManagement.Enrollment.AutoPilotOobeSetting.disallowUserAsLocalAdmin); };
        CloudDomain.getCloudAssignedAadServerData       = function () { return getPolicyString("CloudAssignedAadServerData"); };
        // END: remove once PROD has serverFeature "NativeGetPolicy"

        function isAlreadyAzureADJoined() {
            var cloudDomainJoinWorker = _getCloudDomainWorker();
            return cloudDomainJoinWorker.isAlreadyAzureADJoinedAsync();
        }
        CloudDomain.isAlreadyAzureADJoined = isAlreadyAzureADJoined;

        function configureCredentialGuarantee(credentialPromptTitle, credentialPromptCaption) {
            var cloudDomainJoinWorker = _getCloudDomainWorker();
            return cloudDomainJoinWorker.configureCredentialGuarantee(credentialPromptTitle, credentialPromptCaption);
        }
        CloudDomain.configureCredentialGuarantee = configureCredentialGuarantee;

        function decodeJsonWebTokenPart(jwtPart) {
            var base64String = jwtPart.replace(/-/g, "+").replace(/_/g, "/");
            var utf8String = window.atob(base64String);
            var originalString = decodeURIComponent(escape(utf8String));
            return originalString;
        }

        function crackIdToken(idToken) {
            var parts = idToken.split(".");
            if (parts.length == 3) {
                var encodedPayload = parts[1];
                var jsonObjectValue = decodeJsonWebTokenPart(encodedPayload);
                return JSON.parse(jsonObjectValue);
            } else {
                throw new CloudExperienceHost.InvalidArgumentError();
            }
        }

        // Since the WinRT object doesn't technically trust its inputs and token cracking is a nontrivial parsing
        // task, we instead require the caller to do it. Here, as caller, we crack the id token, extract properties of
        // interest, and promote them into an assortment of string properties. The WinRT implementation object then
        // consumes those strings. Historical note: in the past the AADJ Web App did this directly, but we can
        // just as well do it here, and the web app doesn't have any specific interest in the cracked token or its
        // properties, so there's no reason for it to remain in that business.
        function inPlacePromoteIdTokenProperties(propertySet) {
            var idTokenProperties = {
                mandatoryTokenProperties: {
                    upn: {
                        internalName: "tokenUpn",
                        tokenName: "upn",
                    },
                    sid: {
                        internalName: "tokenSid",
                        tokenName: "sid",
                    },
                    tid: {
                        internalName: "tokenTenantId",
                        tokenName: "tid",
                    },
                    displayName: {
                        internalName: "tokenTenantDisplayName",
                        tokenName: "tenant_display_name",
                    },
                },
                optionalTokenProperties: {
                    mdmEnrollmentUrl: {
                        internalName: "tokenMdmEnrollmentUrl",
                        tokenName: "mdm_enrollment_url",
                    },
                    mdmTermsOfUse: {
                        internalName: "tokenMdmTermsOfUseUrl",
                        tokenName: "mdm_terms_of_use_url",
                    },
                    mdmComplianceUrl: {
                        internalName: "tokenMdmComplianceUrl",
                        tokenName: "mdm_compliance_url",
                    },
                    settingSyncUrl: {
                        internalName: "tokenUserSettingSyncUrl",
                        tokenName: "user_setting_sync_url",
                    },
                },
            };

            var crackedIdToken = crackIdToken(propertySet["idToken"]);

            var mandatoryProperties = idTokenProperties.mandatoryTokenProperties;
            for (var property in mandatoryProperties) {
                propertySet[mandatoryProperties[property].internalName] = crackedIdToken[mandatoryProperties[property].tokenName];
            }

            var optionalProperties = idTokenProperties.optionalTokenProperties;
            for (var property in optionalProperties) {
                if (crackedIdToken.hasOwnProperty(optionalProperties[property].tokenName)) {
                    propertySet[optionalProperties[property].internalName] = crackedIdToken[optionalProperties[property].tokenName];
                }
            }
        }

        function returnJoinResultByValue(joinResult) {
            var joinResultValueCopy = {};
            for (var propertyName in joinResult) {
                joinResultValueCopy[propertyName] = joinResult[propertyName];
            }

            return joinResultValueCopy;
        }

        function doAzureADJoin() {
            var cloudDomainJoinWorker = _getCloudDomainWorker();

            var credPromptTitle = WinJS.Resources.getString('/cloudDomainJoin/CredPromptTitle').value;
            var credPromptCaption = WinJS.Resources.getString('/cloudDomainJoin/CredPromptCaption').value;
            cloudDomainJoinWorker.configureCredentialGuarantee(credPromptTitle, credPromptCaption);

            var propertySet = CloudExperienceHost.Storage.PrivateData.getValues();
            inPlacePromoteIdTokenProperties(propertySet);
            return cloudDomainJoinWorker.doAzureADJoinAsync(propertySet).then(function (joinResult) {
                CloudExperienceHost.IUserManager.getInstance().setIUserFromId(cloudDomainJoinWorker.joiningUserId.toString());

                if (commonFeatures.includes("JoinResultObject")) {
                    return returnJoinResultByValue(joinResult);
                } else {
                    // Server doesn't yet support getting back an IJoinResult, so we need to continue returning an int
                    // result type (and throwing an exception on failure HRESULT). This can be removed once the server
                    // updates have rolled out to production.
                    if (joinResult.resultType == 3) {                   // ResultType::Failed
                        throw { HResult: joinResult.failureResult };    // Simulate old behavior of failure HRESULT appearing via e.HResult
                    } else {
                        return joinResult.resultType;
                    }
                }
            });
        }
        CloudDomain.doAzureADJoin = doAzureADJoin;

        function getAuthorizationEndpoint(discoveryUrl) {
            var correlationId = getClientRequestId();
            return WinJS.xhr({
                    url: discoveryUrl,
                    headers: {
                        "client-request-id": correlationId,
                        "cxh-correlationId": correlationId
                    }
                }).then(function (response) {
                    return JSON.parse(response.responseText)["authorization_endpoint"];
                }, function (e) {
                    CloudExperienceHost.Telemetry.WebAppTelemetry.getInstance().logEvent("CDJUIDiscoveryFailure", JSON.stringify({objectType: e && e.toString(), status: e.status && e.status.toString()}));
                    return Promise.reject(e);
                });
        }
        CloudDomain.getAuthorizationEndpoint = getAuthorizationEndpoint;

        function getRecoveryUpn() {
            var cloudDomainJoinWorker = _getCloudDomainWorker();
            return cloudDomainJoinWorker.getRecoveryUpnAsync();
        }
        CloudDomain.getRecoveryUpn = getRecoveryUpn;

        function doRecovery() {
            var cloudDomainJoinWorker = _getCloudDomainWorker();

            var propertySet = CloudExperienceHost.Storage.PrivateData.getValues();
            inPlacePromoteIdTokenProperties(propertySet);
            return cloudDomainJoinWorker.doRecoveryAsync(propertySet);
        }
        CloudDomain.doRecovery = doRecovery;

        function revertZtdPolicy() {
            var cloudDomainJoinWorker = _getCloudDomainWorker();
            return cloudDomainJoinWorker.revertZtdPolicyAsync();
        }
        CloudDomain.revertZtdPolicy = revertZtdPolicy;

        function isCancellationAllowed() {
            var allowed = true;
            if (CloudExperienceHost.getContext().host.toLowerCase() === "frx") {
                var allowedProviders = CloudExperienceHostAPI.SignInIdentities.allowedProviders;
                var signInProvidersflag = CloudExperienceHostAPI.SignInIdentityProviders;

                if (0 === (allowedProviders & signInProvidersflag.msa)) {
                    // If we're in OOBE and MSA isn't supported, then CDJ isn't cancellable.
                    allowed = false;
                }
            }
            return allowed;
        }
        CloudDomain.isCancellationAllowed = isCancellationAllowed;

        function getClientRequestId() {
            return CloudExperienceHost.Telemetry.WebAppTelemetry.getInstance().getId();
        }
        CloudDomain.getClientRequestId = getClientRequestId;

        function getMsAadjRedirQueryTerms() {
            var msAadjRedirQueryTermsPropertyName = "msAadjRedirQueryTerms";

            var propertySet = CloudExperienceHost.Storage.PrivateData.getValues();

            var queryTerms = "";
            if (propertySet.hasOwnProperty(msAadjRedirQueryTermsPropertyName)) {
                queryTerms = propertySet[msAadjRedirQueryTermsPropertyName];

                // This property can only be read once, as like a query term on a URL, it's irretrievable
                // at any other time in any other context.
                CloudExperienceHost.Storage.PrivateData.addItem(msAadjRedirQueryTermsPropertyName, "");
            }

            return queryTerms;
        }
        CloudDomain.getMsAadjRedirQueryTerms = getMsAadjRedirQueryTerms;

    })(CloudExperienceHost.CloudDomain || (CloudExperienceHost.CloudDomain = {}));
    var CloudDomain = CloudExperienceHost.CloudDomain;
})(CloudExperienceHost || (CloudExperienceHost = {}));