// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
// SPDX-License-Identifier: Apache-2.0

import { AmplifyErrorMap } from '@aws-amplify/core/internals/utils';

import { AuthValidationErrorCode } from '../errors/types/validation';

export const validationErrorMap: AmplifyErrorMap<AuthValidationErrorCode> = {
	[AuthValidationErrorCode.EmptyChallengeResponse]: {
		message: 'challengeResponse is required to confirmSignIn',
	},
	[AuthValidationErrorCode.EmptyConfirmResetPasswordUsername]: {
		message: 'username is required to confirmResetPassword',
	},
	[AuthValidationErrorCode.EmptyConfirmSignUpCode]: {
		message: 'code is required to confirmSignUp',
	},
	[AuthValidationErrorCode.EmptyConfirmSignUpUsername]: {
		message: 'username is required to confirmSignUp',
	},
	[AuthValidationErrorCode.EmptyConfirmResetPasswordConfirmationCode]: {
		message: 'confirmationCode is required to confirmResetPassword',
	},
	[AuthValidationErrorCode.EmptyConfirmResetPasswordNewPassword]: {
		message: 'newPassword is required to confirmResetPassword',
	},
	[AuthValidationErrorCode.EmptyResendSignUpCodeUsername]: {
		message: 'username is required to confirmSignUp',
	},
	[AuthValidationErrorCode.EmptyResetPasswordUsername]: {
		message: 'username is required to resetPassword',
	},
	[AuthValidationErrorCode.EmptySignInPassword]: {
		message: 'password is required to signIn',
	},
	[AuthValidationErrorCode.EmptySignInUsername]: {
		message: 'username is required to signIn',
	},
	[AuthValidationErrorCode.EmptySignUpPassword]: {
		message: 'password is required to signUp',
	},
	[AuthValidationErrorCode.EmptySignUpUsername]: {
		message: 'username is required to signUp',
	},
	[AuthValidationErrorCode.CustomAuthSignInPassword]: {
		message: 'A password is not needed when signing in with CUSTOM_WITHOUT_SRP',
		recoverySuggestion: 'Do not include a password in your signIn call.',
	},
	[AuthValidationErrorCode.IncorrectMFAMethod]: {
		message:
			'Incorrect MFA method was chosen. It should be either SMS, TOTP, or EMAIL',
		recoverySuggestion:
			'Try to pass SMS, TOTP, or EMAIL as the challengeResponse',
	},
	[AuthValidationErrorCode.EmptyVerifyTOTPSetupCode]: {
		message: 'code is required to verifyTotpSetup',
	},
	[AuthValidationErrorCode.EmptyUpdatePassword]: {
		message: 'oldPassword and newPassword are required to changePassword',
	},
	[AuthValidationErrorCode.EmptyConfirmUserAttributeCode]: {
		message: 'confirmation code is required to confirmUserAttribute',
	},
	[AuthValidationErrorCode.InvalidPreferredChallenge]: {
		message:
			'The preferred challenge is not enabled in your backend configuration',
		recoverySuggestion:
			'Ensure the authentication method is enabled in your Amplify backend configuration',
	},
};

// TODO: delete this code when the Auth class is removed.
export enum AuthErrorStrings {
	DEFAULT_MSG = 'Authentication Error',
	EMPTY_EMAIL = 'Email cannot be empty',
	EMPTY_PHONE = 'Phone number cannot be empty',
	EMPTY_USERNAME = 'Username cannot be empty',
	INVALID_USERNAME = 'The username should either be a string or one of the sign in types',
	EMPTY_PASSWORD = 'Password cannot be empty',
	EMPTY_CODE = 'Confirmation code cannot be empty',
	SIGN_UP_ERROR = 'Error creating account',
	NO_MFA = 'No valid MFA method provided',
	INVALID_MFA = 'Invalid MFA type',
	EMPTY_CHALLENGE = 'Challenge response cannot be empty',
	NO_USER_SESSION = 'Failed to get the session because the user is empty',
	NETWORK_ERROR = 'Network Error',
	DEVICE_CONFIG = 'Device tracking has not been configured in this User Pool',
	AUTOSIGNIN_ERROR = 'Please use your credentials to sign in',
	OAUTH_ERROR = "Couldn't finish OAuth flow, check your User Pool HostedUI settings",
}

export enum AuthErrorCodes {
	SignInException = 'SignInException',
	OAuthSignInError = 'OAuthSignInException',
}