// @flow
import fs from 'fs';
import { duotones, getDuotoneUrls } from './util/duotone';
import getApiProxyRoutes from './routes';
import proxyApi$ from './proxy';

import { API_ROUTE_PATH, API_PROXY_PLUGIN_NAME } from './config';
export { API_ROUTE_PATH } from './config';

/*
 * When response is sent, the plugin needs to delete any files that were
 * uploaded to the POST/PATCH endpoint
 */
const onResponse = request => {
	const { uploads } = request.plugins[API_PROXY_PLUGIN_NAME];
	const { logger } = request.server.app;
	uploads.forEach(f =>
		fs.unlink(f, err => {
			if (err) {
				logger.error({
					err,
					context: request,
					f,
					...request.raw,
				});
			}
		})
	);
};

export const setPluginState = (request: HapiRequest, reply: HapiReply) => {
	request.plugins[API_PROXY_PLUGIN_NAME] = {
		setState: reply.state, // allow plugin to proxy cookies from API
		uploads: [], // keep track of any files that were uploaded
	};

	return reply.continue();
};

export default function register(
	server: Object,
	options: void,
	next: () => void
) {
	// supply duotone urls through `server.plugins['mwp-api-proxy-plugin'].duotoneUrls`
	server.expose(
		'duotoneUrls',
		getDuotoneUrls(duotones, server.settings.app.photo_scaler_salt)
	);

	// add a method to the `request` object that can call REST API
	server.decorate('request', 'proxyApi$', proxyApi$, { apply: true });
	// plugin state must be available to all routes that use `request.proxyApi$`
	server.ext('onRequest', setPluginState);
	// clean up request state once response is sent
	server.on('response', onResponse);

	// add a route that will receive query requests as querystring params
	const routes = getApiProxyRoutes(API_ROUTE_PATH);
	server.route(routes);

	next();
}

register.attributes = {
	name: API_PROXY_PLUGIN_NAME,
	version: '1.0.0',
	dependencies: [
		'mwp-auth', // provides request.auth.credentials (member cookie)
		'tracking', // provides request.trackActivity()
		'electrode-csrf-jwt', // provides csrf protection for POST
	],
};

@@ -1892,21 +1892,35 @@
 ls (
+%7B 
 member
- c
+C
 ookie
+, csrfToken %7D
 )%0A%09%09

clarify auth dependency