import time
import requests
from config import Config
from logging_config import setup_logging

logger = setup_logging(__name__)

class AuthHandler:
    def __init__(self):
        # Load configuration from Config class
        self.client_id = Config.SO_CLIENT_ID
        self.client_secret = Config.SO_CLIENT_SECRET
        self.refresh_token = Config.SO_REFRESH_TOKEN
        self.tenant_id = Config.SO_CONTEXT_IDENTIFIER # e.g., Cust55774
        
        # OAuth Token Endpoint for SOD (Could be configurable in future)
        self.token_url = "https://sod.superoffice.com/login/common/oauth/tokens"
        
        self._access_token = None
        self._webapi_url = None
        self._expiry = 0

        if not self.client_id:
             logger.error("SO_CLIENT_ID (or SO_SOD) is not set in environment!")

    def get_ticket(self):
        if self._access_token and time.time() < self._expiry:
            return self._access_token, self._webapi_url
        return self.refresh_access_token()

    def refresh_access_token(self):
        if not self.client_id:
            raise ValueError("Client ID is missing. Cannot refresh token.")

        logger.info(f"Refreshing Access Token for Client ID: {self.client_id[:5]}...")
        
        payload = {
            "grant_type": "refresh_token",
            "client_id": self.client_id,
            "client_secret": self.client_secret,
            "refresh_token": self.refresh_token
        }
        
        headers = {
            "Content-Type": "application/x-www-form-urlencoded",
            "Accept": "application/json"
        }

        try:
            resp = requests.post(self.token_url, data=payload, headers=headers, timeout=30)
            resp.raise_for_status()
            data = resp.json()
            
            self._access_token = data.get("access_token")
            # Based on user's browser URL
            self._webapi_url = f"https://app-sod.superoffice.com/{self.tenant_id}"
            
            self._expiry = time.time() + int(data.get("expires_in", 3600)) - 60
            logger.info("Successfully refreshed Access Token.")
            return self._access_token, self._webapi_url

        except Exception as e:
            logger.error(f"Error refreshing access token: {e}")
            if hasattr(e, 'response') and e.response is not None:
                logger.error(f"Response: {e.response.text}")
            raise