using System.ComponentModel.DataAnnotations;
using System.Security.Cryptography.X509Certificates;
using StellaOps.Cryptography;

namespace StellaOps.Cryptography.Plugin.CryptoPro;

public sealed class CryptoProGostKeyOptions
{
    [Required]
    public string KeyId { get; set; } = string.Empty;

    public string Algorithm { get; set; } = SignatureAlgorithms.GostR3410_2012_256;

    /// <summary>
    /// Optional CryptoPro provider name (defaults to standard CSP).
    /// </summary>
    public string ProviderName { get; set; } = "Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider";

    /// <summary>
    /// Optional container name. If omitted, the certificate private key association is used.
    /// </summary>
    public string? ContainerName { get; set; }

    /// <summary>
    /// Thumbprint of the certificate that owns the CryptoPro private key.
    /// </summary>
    public string? CertificateThumbprint { get; set; }

    /// <summary>
    /// Alternative lookup if thumbprint is not supplied.
    /// </summary>
    public string? SubjectName { get; set; }

    public StoreLocation CertificateStoreLocation { get; set; } = StoreLocation.CurrentUser;

    public StoreName CertificateStoreName { get; set; } = StoreName.My;

    public CryptoProGostKeyOptions Clone()
        => new()
        {
            KeyId = KeyId,
            Algorithm = Algorithm,
            ProviderName = ProviderName,
            ContainerName = ContainerName,
            CertificateThumbprint = CertificateThumbprint,
            SubjectName = SubjectName,
            CertificateStoreLocation = CertificateStoreLocation,
            CertificateStoreName = CertificateStoreName
        };
}