# Authenticator.kt

    /*
     * The MIT License
     *
     * Original work sponsored and donated by The Danish Health Data Authority (http://www.sundhedsdatastyrelsen.dk)
     *
     * Copyright (C) 2025 The Danish Health Data Authority (http://www.sundhedsdatastyrelsen.dk)
     *
     *
     * Permission is hereby granted, free of charge, to any person obtaining a copy of
     * this software and associated documentation files (the "Software"), to deal in
     * the Software without restriction, including without limitation the rights to
     * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
     * of the Software, and to permit persons to whom the Software is furnished to do
     * so, subject to the following conditions:
     *
     *
     * The above copyright notice and this permission notice shall be included in all
     * copies or substantial portions of the Software.
     *
     *
     * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
     * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
     * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
     * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
     * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
     * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
     * SOFTWARE.
     */
    package dk.nsp.mingraviditet.core.network.authenticator

    import com.trifork.timencryptedstorage.models.mapValueOrOnFailed
    import dk.nsp.mingraviditet.core.network.interceptor.AccessTokenInterceptor.Companion.HEADER_AUTHORIZATION
    import dk.nsp.mingraviditet.core.network.interceptor.AccessTokenInterceptor.Companion.TOKEN_TYPE
    import dk.nsp.mingraviditet.core.shared.authentication.IAuthController
    import kotlinx.coroutines.runBlocking
    import okhttp3.Authenticator
    import okhttp3.Request
    import okhttp3.Response
    import okhttp3.Route

    class Authenticator(private val authController: IAuthController) : Authenticator {

        // Called on 401
        override fun authenticate(route: Route?, response: Response): Request? {
            synchronized(this) {
                val updatedToken = runBlocking {
                    with(authController) {
                        getAccessToken().await()
                    }
                }.mapValueOrOnFailed {
                    return null
                }
                return response.request.newBuilder()
                    .header(HEADER_AUTHORIZATION, "$TOKEN_TYPE $updatedToken")
                    .build()
            }
        }
    }