//
//  TestFlightChecker.swift
//  Passepartout
//
//  Created by Davide De Rosa on 5/18/22.
//  Copyright (c) 2024 Davide De Rosa. All rights reserved.
//
//  https://github.com/passepartoutvpn
//
//  This file is part of Passepartout.
//
//  Passepartout is free software: you can redistribute it and/or modify
//  it under the terms of the GNU General Public License as published by
//  the Free Software Foundation, either version 3 of the License, or
//  (at your option) any later version.
//
//  Passepartout is distributed in the hope that it will be useful,
//  but WITHOUT ANY WARRANTY; without even the implied warranty of
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//  GNU General Public License for more details.
//
//  You should have received a copy of the GNU General Public License
//  along with Passepartout.  If not, see <http://www.gnu.org/licenses/>.
//

import Foundation

// https://stackoverflow.com/a/32238344/784615
// https://gist.github.com/lukaskubanek/cbfcab29c0c93e0e9e0a16ab09586996

public final class TestFlightChecker: BetaChecker {
    public init() {
    }

    public func isBeta() async -> Bool {
        await Task.detached {
            self.verifyBetaBuild()
        }.value
    }
}

// MARK: Shared

private extension TestFlightChecker {

    // IMPORTANT: check Mac first because os(iOS) holds true for Catalyst
    func verifyBetaBuild() -> Bool {
#if os(macOS) || targetEnvironment(macCatalyst)
        isMacTestFlightBuild
#elseif os(iOS) || os(tvOS)
        isSandboxBuild
#else
        false
#endif
    }

    var bundle: Bundle {
        .main
    }
}

// MARK: iOS/tvOS

#if os(iOS) || os(tvOS)
private extension TestFlightChecker {
    var isSandboxBuild: Bool {
        guard let url = bundle.appStoreReceiptURL else {
            NSLog("No Bundle.main.appStoreReceiptURL")
            return false
        }
        NSLog("Bundle.main.appStoreReceiptURL = \(url)")
        return bundle.appStoreReceiptURL?.lastPathComponent == "sandboxReceipt"
    }
}
#endif

// MARK: macOS

#if os(macOS) || targetEnvironment(macCatalyst)
private extension TestFlightChecker {
    var isMacTestFlightBuild: Bool {
        var status = noErr

        var code: SecStaticCode?
        status = SecStaticCodeCreateWithPath(bundle.bundleURL as CFURL, [], &code)
        guard status == noErr else {
            return false
        }
        guard let code else {
            return false
        }

        var requirement: SecRequirement?
        status = SecRequirementCreateWithString(
            "anchor apple generic and certificate leaf[field.1.2.840.113635.100.6.1.25.1]" as CFString,
            [], // default
            &requirement
        )
        guard status == noErr else {
            return false
        }
        guard let requirement else {
            return false
        }

        status = SecStaticCodeCheckValidity(
            code,
            [], // default
            requirement
        )
        return status == errSecSuccess
    }
}
#endif