defmodule CA.EST.Get do
  @moduledoc "CA/ETS GET Method HTTP handlers."
  @profiles ["secp256k1","secp384r1","secp521r1"]
  import Plug.Conn

  def get(conn, "CA", profile, _, "CA") when profile in @profiles do
      body = :base64.encode(CA.CSR.read_ca_public(profile))
      conn |> put_resp_content_type("application/pkix-cert")
           |> put_resp_header("Content-Transfer-Encoding", "base64")
           |> put_resp_header("Content-Length", Integer.to_string(byte_size(body)))
           |> resp(200, body)
           |> send_resp()
  end

  def get(conn, "CA", profile, _, "CMS") when profile in @profiles do
      ca = CA.CSR.read_ca_public(profile)
      {:ok, cacert} = :"PKIX1Explicit-2009".decode(:Certificate, ca)
      ci = {:ContentInfo, {1, 2, 840, 113549, 1, 7, 2},
             {:SignedData, :v1, [],
               {:EncapsulatedContentInfo, {1, 2, 840, 113549, 1, 7, 1}, :asn1_NOVALUE},
                 [certificate: cacert], [], []}}
      {:ok, cms} = :"CryptographicMessageSyntax-2010".encode :ContentInfo, ci
      body = :base64.encode cms
      conn |> put_resp_content_type("application/pkcs7-mime")
           |> put_resp_header("Content-Transfer-Encoding", "base64")
           |> put_resp_header("Content-Length", Integer.to_string(byte_size(body)))
           |> resp(200, body)
           |> send_resp()
  end

  def get(conn, "CA", profile, _, "ABAC") when profile in @profiles do
      body = :base64.encode(CA.EST.csrattributes())
      conn |> put_resp_content_type("application/csrattrs")
           |> put_resp_header("Content-Transfer-Encoding", "base64")
           |> put_resp_header("Content-Length", Integer.to_string(byte_size(body)))
           |> resp(200, body)
           |> send_resp()
  end

  def get(conn, _, curve, template, operation) when curve in @profiles do
      send_resp(conn, 200, CA.EST.encode([%{"template" => template, "curve" => curve, "operation" => operation}]))
  end

  def get(_conn, _, _, _, _) do
  end

end