go-cart-actor/pool-server.go

package main

import (
	"bytes"
	"encoding/json"
	"fmt"
	"log"
	"math/rand"
	"net/http"
	"strconv"
	"time"

	messages "git.tornberg.me/go-cart-actor/proto"
)

type PoolServer struct {
	pod_name string
	pool     GrainPool
}

func NewPoolServer(pool GrainPool, pod_name string) *PoolServer {
	return &PoolServer{
		pod_name: pod_name,
		pool:     pool,
	}
}

func (s *PoolServer) process(id CartId, mutation interface{}) (*messages.CartState, error) {
	grain, err := s.pool.Apply(id, mutation)
	if err != nil {
		return nil, err
	}
	return ToCartState(grain), nil
}

func (s *PoolServer) HandleGet(w http.ResponseWriter, r *http.Request, id CartId) error {
	grain, err := s.pool.Get(id)
	if err != nil {
		return err
	}

	return s.WriteResult(w, ToCartState(grain))
}

func (s *PoolServer) HandleAddSku(w http.ResponseWriter, r *http.Request, id CartId) error {
	sku := r.PathValue("sku")
	data, err := s.process(id, &messages.AddRequest{Sku: sku, Quantity: 1})
	if err != nil {
		return err
	}
	return s.WriteResult(w, data)
}

func ErrorHandler(fn func(w http.ResponseWriter, r *http.Request) error) func(w http.ResponseWriter, r *http.Request) {
	return func(w http.ResponseWriter, r *http.Request) {
		err := fn(w, r)
		if err != nil {
			log.Printf("Server error, not remote error: %v\n", err)
			w.WriteHeader(http.StatusInternalServerError)
			w.Write([]byte(err.Error()))
		}
	}
}

func (s *PoolServer) WriteResult(w http.ResponseWriter, result *messages.CartState) error {
	w.Header().Set("Content-Type", "application/json")
	w.Header().Set("Cache-Control", "no-cache")
	w.Header().Set("Access-Control-Allow-Origin", "*")
	w.Header().Set("X-Pod-Name", s.pod_name)
	if result == nil {

		w.WriteHeader(http.StatusInternalServerError)

		return nil
	}
	w.WriteHeader(http.StatusOK)
	enc := json.NewEncoder(w)
	err := enc.Encode(result)
	return err
}

func (s *PoolServer) HandleDeleteItem(w http.ResponseWriter, r *http.Request, id CartId) error {

	itemIdString := r.PathValue("itemId")
	itemId, err := strconv.Atoi(itemIdString)
	if err != nil {
		return err
	}
	data, err := s.process(id, &messages.RemoveItem{Id: int64(itemId)})
	if err != nil {
		return err
	}
	return s.WriteResult(w, data)
}

type SetDelivery struct {
	Provider    string                `json:"provider"`
	Items       []int64               `json:"items"`
	PickupPoint *messages.PickupPoint `json:"pickupPoint,omitempty"`
}

func (s *PoolServer) HandleSetDelivery(w http.ResponseWriter, r *http.Request, id CartId) error {

	delivery := SetDelivery{}
	err := json.NewDecoder(r.Body).Decode(&delivery)
	if err != nil {
		return err
	}
	data, err := s.process(id, &messages.SetDelivery{
		Provider:    delivery.Provider,
		Items:       delivery.Items,
		PickupPoint: delivery.PickupPoint,
	})
	if err != nil {
		return err
	}
	return s.WriteResult(w, data)
}

func (s *PoolServer) HandleSetPickupPoint(w http.ResponseWriter, r *http.Request, id CartId) error {

	deliveryIdString := r.PathValue("deliveryId")
	deliveryId, err := strconv.Atoi(deliveryIdString)
	if err != nil {
		return err
	}
	pickupPoint := messages.PickupPoint{}
	err = json.NewDecoder(r.Body).Decode(&pickupPoint)
	if err != nil {
		return err
	}
	reply, err := s.process(id, &messages.SetPickupPoint{
		DeliveryId: int64(deliveryId),
		Id:         pickupPoint.Id,
		Name:       pickupPoint.Name,
		Address:    pickupPoint.Address,
		City:       pickupPoint.City,
		Zip:        pickupPoint.Zip,
		Country:    pickupPoint.Country,
	})
	if err != nil {
		return err
	}
	return s.WriteResult(w, reply)
}

func (s *PoolServer) HandleRemoveDelivery(w http.ResponseWriter, r *http.Request, id CartId) error {

	deliveryIdString := r.PathValue("deliveryId")
	deliveryId, err := strconv.Atoi(deliveryIdString)
	if err != nil {
		return err
	}
	reply, err := s.process(id, &messages.RemoveDelivery{Id: int64(deliveryId)})
	if err != nil {
		return err
	}
	return s.WriteResult(w, reply)
}

func (s *PoolServer) HandleQuantityChange(w http.ResponseWriter, r *http.Request, id CartId) error {
	changeQuantity := messages.ChangeQuantity{}
	err := json.NewDecoder(r.Body).Decode(&changeQuantity)
	if err != nil {
		return err
	}
	reply, err := s.process(id, &changeQuantity)
	if err != nil {
		return err
	}
	return s.WriteResult(w, reply)
}

func (s *PoolServer) HandleSetCartItems(w http.ResponseWriter, r *http.Request, id CartId) error {
	setCartItems := messages.SetCartRequest{}
	err := json.NewDecoder(r.Body).Decode(&setCartItems)
	if err != nil {
		return err
	}
	reply, err := s.process(id, &setCartItems)
	if err != nil {
		return err
	}
	return s.WriteResult(w, reply)
}

func (s *PoolServer) HandleAddRequest(w http.ResponseWriter, r *http.Request, id CartId) error {
	addRequest := messages.AddRequest{}
	err := json.NewDecoder(r.Body).Decode(&addRequest)
	if err != nil {
		return err
	}
	reply, err := s.process(id, &addRequest)
	if err != nil {
		return err
	}
	return s.WriteResult(w, reply)
}

func (s *PoolServer) HandleConfirmation(w http.ResponseWriter, r *http.Request, id CartId) error {
	orderId := r.PathValue("orderId")
	if orderId == "" {
		return fmt.Errorf("orderId is empty")
	}
	order, err := KlarnaInstance.GetOrder(orderId)

	if err != nil {
		return err
	}

	w.Header().Set("Content-Type", "application/json")
	w.Header().Set("X-Pod-Name", s.pod_name)
	w.Header().Set("Cache-Control", "no-cache")
	w.Header().Set("Access-Control-Allow-Origin", "*")
	w.WriteHeader(http.StatusOK)
	return json.NewEncoder(w).Encode(order)
}

func (s *PoolServer) CreateOrUpdateCheckout(host string, id CartId) (*CheckoutOrder, error) {
	meta := &CheckoutMeta{
		Terms:        fmt.Sprintf("https://%s/terms", host),
		Checkout:     fmt.Sprintf("https://%s/checkout?order_id={checkout.order.id}", host),
		Confirmation: fmt.Sprintf("https://%s/confirmation/{checkout.order.id}", host),
		Validation:   fmt.Sprintf("https://%s/validate", host),
		Push:         fmt.Sprintf("https://%s/push?order_id={checkout.order.id}", host),
		Country:      getCountryFromHost(host),
	}

	// Get current grain state (may be local or remote)
	grain, err := s.pool.Get(id)
	if err != nil {
		return nil, err
	}

	// Build pure checkout payload
	payload, _, err := BuildCheckoutOrderPayload(grain, meta)
	if err != nil {
		return nil, err
	}

	if grain.OrderReference != "" {
		return KlarnaInstance.UpdateOrder(grain.OrderReference, bytes.NewReader(payload))
	} else {
		return KlarnaInstance.CreateOrder(bytes.NewReader(payload))
	}
}

func (s *PoolServer) ApplyCheckoutStarted(klarnaOrder *CheckoutOrder, id CartId) (*CartGrain, error) {
	// Persist initialization state via mutation (best-effort)
	return s.pool.Apply(id, &messages.InitializeCheckout{
		OrderId:           klarnaOrder.ID,
		Status:            klarnaOrder.Status,
		PaymentInProgress: true,
	})
}

func (s *PoolServer) HandleCheckout(w http.ResponseWriter, r *http.Request, id CartId) error {
	klarnaOrder, err := s.CreateOrUpdateCheckout(r.Host, id)
	if err != nil {
		return err
	}

	s.ApplyCheckoutStarted(klarnaOrder, id)

	w.Header().Set("Content-Type", "application/json")
	return json.NewEncoder(w).Encode(klarnaOrder)
}

func NewCartId() CartId {
	// Deprecated: legacy random/time based cart id generator.
	// Retained for compatibility; new code should prefer canonical CartID path.
	cid, err := NewCartID()
	if err != nil {
		// Fallback to legacy method only if crypto/rand fails
		id := time.Now().UnixNano() + rand.Int63()
		return ToCartId(fmt.Sprintf("%d", id))
	}
	return CartIDToLegacy(cid)
}

func CookieCartIdHandler(fn func(w http.ResponseWriter, r *http.Request, cartId CartId) error) func(w http.ResponseWriter, r *http.Request) error {
	return func(w http.ResponseWriter, r *http.Request) error {
		// Extract / normalize cookie (preserve legacy textual IDs without rewriting).
		var legacy CartId
		cookies := r.CookiesNamed("cartid")
		if len(cookies) == 0 {
			// No cookie -> generate new canonical base62 id.
			cid, generated, _, err := CanonicalizeOrLegacy("")
			if err != nil {
				return fmt.Errorf("failed to generate cart id: %w", err)
			}
			legacy = CartIDToLegacy(cid)
			if generated {
				http.SetCookie(w, &http.Cookie{
					Name:     "cartid",
					Value:    cid.String(),
					Secure:   r.TLS != nil,
					HttpOnly: true,
					Path:     "/",
					Expires:  time.Now().AddDate(0, 0, 14),
					SameSite: http.SameSiteLaxMode,
				})
				w.Header().Set("Set-Cart-Id", cid.String())
			}
		} else {
			raw := cookies[0].Value
			cid, generated, wasBase62, err := CanonicalizeOrLegacy(raw)
			if err != nil {
				return fmt.Errorf("failed to canonicalize cart id: %w", err)
			}
			legacy = CartIDToLegacy(cid)
			// Only set a new cookie if we actually generated a brand-new ID (empty input).
			// For legacy (non-base62) ids we preserve the original text and do not overwrite.
			if generated && wasBase62 {
				http.SetCookie(w, &http.Cookie{
					Name:     "cartid",
					Value:    cid.String(),
					Secure:   r.TLS != nil,
					HttpOnly: true,
					Path:     "/",
					Expires:  time.Now().AddDate(0, 0, 14),
					SameSite: http.SameSiteLaxMode,
				})
				w.Header().Set("Set-Cart-Id", cid.String())
			}
		}
		return fn(w, r, legacy)
	}
}

func (s *PoolServer) RemoveCartCookie(w http.ResponseWriter, r *http.Request, cartId CartId) error {
	cartId = NewCartId()
	http.SetCookie(w, &http.Cookie{
		Name:     "cartid",
		Value:    cartId.String(),
		Path:     "/",
		Secure:   r.TLS != nil,
		HttpOnly: true,
		Expires:  time.Unix(0, 0),
		SameSite: http.SameSiteLaxMode,
	})
	w.WriteHeader(http.StatusOK)
	return nil
}

func CartIdHandler(fn func(w http.ResponseWriter, r *http.Request, cartId CartId) error) func(w http.ResponseWriter, r *http.Request) error {
	return func(w http.ResponseWriter, r *http.Request) error {
		raw := r.PathValue("id")
		cid, generated, wasBase62, err := CanonicalizeOrLegacy(raw)
		if err != nil {
			return fmt.Errorf("invalid cart id: %w", err)
		}
		legacy := CartIDToLegacy(cid)
		// Only emit Set-Cart-Id header if we produced a brand-new canonical id
		// AND it is base62 (avoid rewriting legacy textual identifiers).
		if generated && wasBase62 {
			w.Header().Set("Set-Cart-Id", cid.String())
		}
		return fn(w, r, legacy)
	}
}

func (s *PoolServer) Serve() *http.ServeMux {
	mux := http.NewServeMux()
	//mux.HandleFunc("/", s.RewritePath)
	mux.HandleFunc("OPTIONS /", func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set("Access-Control-Allow-Origin", "*")
		w.Header().Set("Access-Control-Allow-Methods", "GET, PUT, POST, DELETE")
		w.Header().Set("Access-Control-Allow-Headers", "Content-Type")
		w.WriteHeader(http.StatusOK)
	})

	mux.HandleFunc("GET /", ErrorHandler(CookieCartIdHandler(s.HandleGet)))
	mux.HandleFunc("GET /add/{sku}", ErrorHandler(CookieCartIdHandler(s.HandleAddSku)))
	mux.HandleFunc("POST /", ErrorHandler(CookieCartIdHandler(s.HandleAddRequest)))
	mux.HandleFunc("POST /set", ErrorHandler(CookieCartIdHandler(s.HandleSetCartItems)))
	mux.HandleFunc("DELETE /{itemId}", ErrorHandler(CookieCartIdHandler(s.HandleDeleteItem)))
	mux.HandleFunc("PUT /", ErrorHandler(CookieCartIdHandler(s.HandleQuantityChange)))
	mux.HandleFunc("DELETE /", ErrorHandler(CookieCartIdHandler(s.RemoveCartCookie)))
	mux.HandleFunc("POST /delivery", ErrorHandler(CookieCartIdHandler(s.HandleSetDelivery)))
	mux.HandleFunc("DELETE /delivery/{deliveryId}", ErrorHandler(CookieCartIdHandler(s.HandleRemoveDelivery)))
	mux.HandleFunc("PUT /delivery/{deliveryId}/pickupPoint", ErrorHandler(CookieCartIdHandler(s.HandleSetPickupPoint)))
	mux.HandleFunc("GET /checkout", ErrorHandler(CookieCartIdHandler(s.HandleCheckout)))
	mux.HandleFunc("GET /confirmation/{orderId}", ErrorHandler(CookieCartIdHandler(s.HandleConfirmation)))

	mux.HandleFunc("GET /byid/{id}", ErrorHandler(CartIdHandler(s.HandleGet)))
	mux.HandleFunc("GET /byid/{id}/add/{sku}", ErrorHandler(CartIdHandler(s.HandleAddSku)))
	mux.HandleFunc("POST /byid/{id}", ErrorHandler(CartIdHandler(s.HandleAddRequest)))
	mux.HandleFunc("DELETE /byid/{id}/{itemId}", ErrorHandler(CartIdHandler(s.HandleDeleteItem)))
	mux.HandleFunc("PUT /byid/{id}", ErrorHandler(CartIdHandler(s.HandleQuantityChange)))
	mux.HandleFunc("POST /byid/{id}/delivery", ErrorHandler(CartIdHandler(s.HandleSetDelivery)))
	mux.HandleFunc("DELETE /byid/{id}/delivery/{deliveryId}", ErrorHandler(CartIdHandler(s.HandleRemoveDelivery)))
	mux.HandleFunc("PUT /byid/{id}/delivery/{deliveryId}/pickupPoint", ErrorHandler(CartIdHandler(s.HandleSetPickupPoint)))
	mux.HandleFunc("GET /byid/{id}/checkout", ErrorHandler(CartIdHandler(s.HandleCheckout)))
	mux.HandleFunc("GET /byid/{id}/confirmation", ErrorHandler(CartIdHandler(s.HandleConfirmation)))

	return mux
}