import { Injectable } from '@angular/core';
import { from, Observable, throwError } from 'rxjs';

import { Auth } from 'aws-amplify';
import { catchError, map } from 'rxjs/operators';

@Injectable({
  providedIn: 'root'
})
export class CognitoService {
  public signUp(username: string, password: string): Observable<any> {
    return from(
      Auth.signUp({
        username,
        password
      })
    ).pipe(catchError(error => throwError(error)));
  }

  public signUpWithAttributes(
    username: string,
    password: string,
    attributes: any
  ): Observable<any> {
    return from(
      Auth.signUp({
        username,
        password,
        attributes
      })
    ).pipe(catchError(error => throwError(error)));
  }

  public confirmEmail(username: string, code: string) {
    return from(Auth.confirmSignUp(username, code)).pipe(
      catchError(error => throwError(error))
    );
  }

  public signIn(username: string, password: string): Observable<any> {
    return from(Auth.signIn(username, password)).pipe(
      catchError(error => throwError(error))
    );
  }

  public completeNewPassowrd(user: any, newPassword: string): Observable<any> {
    return from(
      Auth.completeNewPassword(
        user, // Cognito User Object
        newPassword, // New password
        {}
      )
    ).pipe(catchError(error => throwError(error)));
  }

  public getSession() {
    return from(Auth.currentSession()).pipe(
      catchError(error => throwError(error))
    );
  }

  public getAccessToken() {
    return from(Auth.currentSession()).pipe(
      map((session: any) => {
        return session.getAccessToken();
      }),
      catchError(error => throwError(error))
    );
  }

  public signOut() {
    return from(Auth.signOut()).pipe(catchError(error => throwError(error)));
  }

  public signOutGlobal() {
    // By doing this, you are revoking all the auth tokens(id token, access token and refresh token)
    // which means the user is signed out from all the devices
    // Note: although the tokens are revoked, the AWS credentials will remain valid until they expire (which by default is 1 hour)
    return from(Auth.signOut({ global: true })).pipe(
      catchError(error => throwError(error))
    );
  }
}