package com.ircproject.config;

import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.core.io.Resource;
import org.springframework.core.io.ResourceLoader;

import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManagerFactory;
import java.io.InputStream;
import java.security.KeyStore;

@Configuration
public class SslConfig {

    @Value("${irc.ssl.keystore-path}")
    private String keystorePath;

    @Value("${irc.ssl.keystore-password}")  // 👈 환경변수 자동 주입
    private String keystorePassword;

    @Value("${irc.ssl.keystore-type}")
    private String keystoreType;

    private final ResourceLoader resourceLoader;

    public SslConfig(ResourceLoader resourceLoader) {
        this.resourceLoader = resourceLoader;
    }

    @Bean
    public SSLContext sslContext() throws Exception {
        // 1. Keystore 로드 (JAR 내부 파일도 읽을 수 있도록 ResourceLoader 사용)
        KeyStore keyStore = KeyStore.getInstance(keystoreType);
        Resource resource = resourceLoader.getResource(keystorePath);

        try (InputStream stream = resource.getInputStream()) {
            keyStore.load(stream, keystorePassword.toCharArray());
        }

        // 2. KeyManager 초기화 (서버 신분증)
        KeyManagerFactory kmf = KeyManagerFactory.getInstance(
            KeyManagerFactory.getDefaultAlgorithm()
        );
        kmf.init(keyStore, keystorePassword.toCharArray());

        // 3. TrustManager 초기화 (클라이언트 검증)
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(
            TrustManagerFactory.getDefaultAlgorithm()
        );
        tmf.init(keyStore);

        // 4. SSLContext 생성
        SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

        return sslContext;
    }
}