// Copyright 2026 Versity Software
// This file is licensed under the Apache License, Version 2.0
// (the "License"); you may not use this file except in compliance
// with the License.  You may obtain a copy of the License at
//
//   http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing,
// software distributed under the License is distributed on an
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
// KIND, either express or implied.  See the License for the
// specific language governing permissions and limitations
// under the License.

package s3err

import (
	"encoding/xml"
	"net/http"
	"strings"
)

// HeadersNotSignedError is returned when signature verification receives
// required signed headers that were omitted from SignedHeaders.
type HeadersNotSignedError struct {
	APIError
	HeadersNotSigned string
}

func (e HeadersNotSignedError) XMLBody(requestID, hostID string) []byte {
	return encodeResponse(struct {
		XMLName          xml.Name `xml:"Error"`
		Code             string
		Message          string
		HeadersNotSigned string `xml:",omitempty"`
		RequestID        string `xml:"RequestId,omitempty"`
		HostID           string `xml:"HostId,omitempty"`
	}{
		Code:             e.Code,
		Message:          e.Description,
		HeadersNotSigned: e.HeadersNotSigned,
		RequestID:        requestID,
		HostID:           hostID,
	})
}

func (e HeadersNotSignedError) Is(target error) bool {
	t, ok := target.(APIError)
	return ok && e.APIError == t
}

func GetHeadersNotSignedErr(headers []string) HeadersNotSignedError {
	return HeadersNotSignedError{
		APIError: APIError{
			Code:           "AccessDenied",
			Description:    "There were headers present in the request which were not signed",
			HTTPStatusCode: http.StatusForbidden,
		},
		HeadersNotSigned: strings.Join(headers, ", "),
	}
}