/// <reference types="bun-types" />
// bun --env-file="auth-examples/.env" run auth-examples/auth-code-confidential.ts

import { AuthUtils, IamClient } from "../src/index.js";
import { OAuthErrorResponse } from "../src/models/errors/index.js";
import { listenForAuthCallback } from "./_helpers.js";

// Details configured from the Docusign developer console.
const clientId = process.env.AUTH_CODE_CONFIDENTIAL_CLIENT_ID!;
const secretKey = process.env.AUTH_CODE_CONFIDENTIAL_SECRET_KEY!;
const redirectUri = process.env.DOCUSIGN_REDIRECT_URI!;

const authorizationUrl = AuthUtils.createAuthorizationUrl({
  type: "code",
  clientId,
  redirectUri,
  scopes: ["signature", "impersonation"],
});

// Prompt the user to visit the authorization URL. They'll need to grab the
// code from the `code` query parameter
console.log(
  `Please visit this URL to authorize the application:\n${authorizationUrl}\n`,
);

// Spin up a local server to listen for the redirect from Docusign
const { value: code } = await listenForAuthCallback({
  path: new URL(redirectUri).pathname,
});

// Get token information using the authorization code
const { accessToken, refreshToken, expiresIn } = await new IamClient().auth
  .getTokenFromConfidentialAuthCode({ clientId, secretKey }, { code })
  .catch((error) => {
    if (error instanceof OAuthErrorResponse) {
      throw new Error(
        `Failed to get auth session. Error: ${error.error}, Description: ${error.errorDescription}`,
      );
    }
    throw error;
  });

console.log(
  `Auth Session:\n${JSON.stringify({ accessToken, refreshToken, expiresIn }, null, 2)}\n`,
);

// Instantiate the SDK with the authorization code grant
// Note that `type` is `confidential`.
const authenticatedClient = new IamClient({
  accessToken: accessToken,
});

const result = await authenticatedClient.auth.getUserInfo();

// Handle the result
console.log("User Info:\n", result, "\n");