// Client-side AT Protocol OAuth. Production uses the hosted /client-metadata.json;
// local dev uses a loopback client (requires the 127.0.0.1 origin, not localhost),
// with the write scopes encoded in the loopback client_id.
import { BrowserOAuthClient } from '@atproto/oauth-client-browser';
import { OAUTH_SCOPE } from './oauth-scope';

const HANDLE_RESOLVER = 'https://bsky.social';

export async function createOAuthClient(): Promise<BrowserOAuthClient> {
  const origin = window.location.origin;
  const isLoopback = /^https?:\/\/(127\.0\.0\.1|\[?::1\]?)(:\d+)?$/.test(origin);

  if (isLoopback) {
    const clientId =
      `http://localhost?redirect_uri=${encodeURIComponent(origin + '/')}` +
      `&scope=${encodeURIComponent(OAUTH_SCOPE)}`;
    return BrowserOAuthClient.load({ clientId, handleResolver: HANDLE_RESOLVER });
  }

  return BrowserOAuthClient.load({
    clientId: `${origin}/client-metadata.json`,
    handleResolver: HANDLE_RESOLVER,
  });
}