"""HTTP specific constants."""

from typing import Final

from aiohttp.web import Request

from homeassistant.helpers.http import KEY_AUTHENTICATED, KEY_HASS  # noqa: F401

DOMAIN: Final = "http"

KEY_HASS_USER: Final = "hass_user"
KEY_HASS_REFRESH_TOKEN_ID: Final = "hass_refresh_token_id"
KEY_SUPERVISOR_UNIX_SOCKET: Final = "ha_supervisor_unix_socket"

CONF_SERVER_HOST: Final = "server_host"
CONF_SERVER_PORT: Final = "server_port"
CONF_BASE_URL: Final = "base_url"
CONF_SSL_CERTIFICATE: Final = "ssl_certificate"
CONF_SSL_PEER_CERTIFICATE: Final = "ssl_peer_certificate"
CONF_SSL_KEY: Final = "ssl_key"
CONF_CORS_ORIGINS: Final = "cors_allowed_origins"
CONF_USE_X_FORWARDED_FOR: Final = "use_x_forwarded_for"
CONF_USE_X_FRAME_OPTIONS: Final = "use_x_frame_options"
CONF_TRUSTED_PROXIES: Final = "trusted_proxies"
CONF_LOGIN_ATTEMPTS_THRESHOLD: Final = "login_attempts_threshold"
CONF_IP_BAN_ENABLED: Final = "ip_ban_enabled"
CONF_SSL_PROFILE: Final = "ssl_profile"

SSL_MODERN: Final = "modern"
SSL_INTERMEDIATE: Final = "intermediate"

ENV_SETUP_PORT: Final = "SETUP_PORT"
ENV_SUPERVISOR: Final = "SUPERVISOR"

# Default HTTP port when running under Supervisor, which fronts Core on the
# standard HTTP port.
SUPERVISOR_DEFAULT_PORT: Final = 80

# Cast to be able to load custom cards.
# My to be able to check url and version info.
DEFAULT_CORS: Final[list[str]] = ["https://cast.home-assistant.io"]
NO_LOGIN_ATTEMPT_THRESHOLD: Final = -1

ATTR_CONFIG = "config"


def is_supervisor_unix_socket_request(request: Request) -> bool:
    """Check if request arrived over the Supervisor Unix socket.

    The result is cached on the request since it is checked by both the ban
    and auth middlewares.
    """
    cached: bool | None = request.get(KEY_SUPERVISOR_UNIX_SOCKET)
    if cached is not None:
        return cached
    # Cheapest check first: without a configured socket path this can never be
    # a Supervisor Unix socket request, so we avoid probing the transport.
    if (
        (http := request.app[KEY_HASS].http) is None
        or (supervisor_path := http.supervisor_unix_socket_path) is None
        or (transport := request.transport) is None
    ):
        result = False
    else:
        sockname: str | None = transport.get_extra_info("sockname")
        result = sockname == str(supervisor_path)
    request[KEY_SUPERVISOR_UNIX_SOCKET] = result
    return result