import axios from 'axios';
import ExpoCryptoDpop from 'expo-crypto-dpop';

const apiClient = axios.create({
  baseURL: 'https://api.example.com',
});

// 요청 인터셉터: 모든 요청에 DPoP 증명 자동 추가
apiClient.interceptors.request.use(async (config) => {
  const method = config.method?.toUpperCase() ?? 'GET';
  const url = new URL(config.url ?? '', config.baseURL);
  // htu는 쿼리 파라미터와 프래그먼트를 제외한 URI
  const htu = `${url.origin}${url.pathname}`;

  const accessToken = getStoredAccessToken(); // 저장된 액세스 토큰 조회

  const dpopProof = await ExpoCryptoDpop.createProof({
    htm: method,
    htu,
    accessToken: accessToken ?? undefined,
  });

  config.headers['DPoP'] = dpopProof;

  if (accessToken) {
    config.headers['Authorization'] = `DPoP ${accessToken}`;
  }

  return config;
});

import axios from 'axios';
import ExpoCryptoDpop from 'expo-crypto-dpop';

let currentNonce: string | null = null;

// 응답 인터셉터: nonce 처리 및 자동 재시도
apiClient.interceptors.response.use(
  (response) => response,
  async (error) => {
    const { config, response } = error;

    if (response?.status === 401) {
      const wwwAuth = response.headers['www-authenticate'] ?? '';

      // use_dpop_nonce 오류 처리
      if (wwwAuth.includes('use_dpop_nonce')) {
        // 서버가 제공한 nonce 추출
        const nonceMatch = wwwAuth.match(/nonce="([^"]+)"/);
        if (nonceMatch) {
          currentNonce = nonceMatch[1];

          // 동일 요청을 nonce 포함하여 재시도
          const method = config.method?.toUpperCase() ?? 'GET';
          const url = new URL(config.url ?? '', config.baseURL);
          const htu = `${url.origin}${url.pathname}`;

          const newProof = await ExpoCryptoDpop.createProof({
            htm: method,
            htu,
            accessToken: getStoredAccessToken() ?? undefined,
            nonce: currentNonce,
          });

          config.headers['DPoP'] = newProof;
          return apiClient(config);
        }
      }
    }

    return Promise.reject(error);
  }
);

import axios, { AxiosError } from 'axios';
import ExpoCryptoDpop from 'expo-crypto-dpop';

let isRefreshing = false;
let refreshQueue: Array<(token: string) => void> = [];

async function refreshAccessToken(): Promise<string> {
  const refreshToken = getStoredRefreshToken();

  // 토큰 갱신 요청에도 DPoP 증명 필요
  const proof = await ExpoCryptoDpop.createProof({
    htm: 'POST',
    htu: 'https://auth.example.com/oauth/token',
  });

  const response = await axios.post(
    'https://auth.example.com/oauth/token',
    {
      grant_type: 'refresh_token',
      refresh_token: refreshToken,
    },
    {
      headers: { DPoP: proof },
    }
  );

  const newAccessToken = response.data.access_token;
  storeAccessToken(newAccessToken);
  return newAccessToken;
}

// 토큰 만료 처리 인터셉터
apiClient.interceptors.response.use(
  (response) => response,
  async (error: AxiosError) => {
    const originalRequest = error.config as any;

    if (error.response?.status === 401 && !originalRequest._retry) {
      originalRequest._retry = true;

      if (isRefreshing) {
        // 이미 갱신 중이면 큐에 대기
        return new Promise((resolve) => {
          refreshQueue.push((token) => {
            originalRequest.headers['Authorization'] = `DPoP ${token}`;
            resolve(apiClient(originalRequest));
          });
        });
      }

      isRefreshing = true;

      try {
        const newToken = await refreshAccessToken();

        // 대기 중인 요청 모두 처리
        refreshQueue.forEach((cb) => cb(newToken));
        refreshQueue = [];

        originalRequest.headers['Authorization'] = `DPoP ${newToken}`;
        return apiClient(originalRequest);
      } finally {
        isRefreshing = false;
      }
    }

    return Promise.reject(error);
  }
);

async function logout() {
  // 1. 서버 측 토큰 폐기 (DPoP 증명 포함)
  await apiClient.post('/auth/logout');

  // 2. 로컬 토큰 삭제
  tokenStorage.clear();

  // 3. DPoP 키 쌍 삭제 (선택 사항 — 보안 강화)
  await ExpoCryptoDpop.deleteKeyPair();
}