request.go

package swt

import (
	"bytes"
	"context"
	"net/http"

	"github.com/gabriel-vasile/mimetype"
)

// Request represents a webhook request configuration for creating SecureWebhookTokens.
// It contains all the necessary information to build HTTP requests with embedded tokens.
type Request struct {
	URL     string // Target URL for the webhook request
	Issuer  string // JWT issuer claim (iss) - typically the service sending the webhook
	Event   string // Event name following EVENT_NAME.ACTIVITY format (e.g., "user.created")
	HashAlg string // Hash algorithm for POST requests (SHA-256, SHA3-256, etc.). Defaults to SHA-256 if empty
	Data    []byte // Payload data to be sent with the request
}

// Build can be used to create a http.Request for creating and sending a
// SecureWebhookToken via POST method (the only allowed HTTP method for Secure Webhook Tokens).
func (r *Request) Build(key any, opts ...Option) (*http.Request, error) {
	var (
		claims WebhookClaims
		req    *http.Request
		err    error
	)

	claims = NewWebhookClaims(r.Issuer, r.Event)
	if len(r.Data) > 0 {
		hash, err := NewHash(r.HashAlg, r.Data)
		if err != nil {
			return nil, err
		}
		claims.Webhook.Hash = hash
	}

	swt, err := NewWithClaims(&claims, opts...)
	if err != nil {
		return nil, err
	}
	tokenStr, err := swt.SignedString(key)
	if err != nil {
		return nil, err
	}

	req, err = http.NewRequest(http.MethodPost, r.URL, bytes.NewReader(r.Data))
	if err != nil {
		return nil, err
	}
	req.Header.Set("Authorization", "Bearer "+tokenStr)

	mType := mimetype.Detect(r.Data)
	if mType != nil {
		req.Header.Set("Content-Type", mType.String())
	} else {
		req.Header.Set("Content-Type", "application/octet-stream")
	}

	return req, nil
}

// BuildWithContext creates an http.Request with context support for creating and sending a
// SecureWebhookToken via POST method. The context can be used for cancellation and timeout control.
func (r *Request) BuildWithContext(ctx context.Context, key any, opts ...Option) (*http.Request, error) {
	// Check context before doing any work
	if err := ctx.Err(); err != nil {
		return nil, err
	}

	req, err := r.Build(key, opts...)
	if err != nil {
		return nil, err
	}

	// Attach context to the request
	return req.WithContext(ctx), nil
}