config.go

package main

import (
	"fmt"
	"log"
	"net/url"
	"os"
	"strings"
	"time"
)

var defaultAllowedOrigins = []string{"http://localhost:3001"}

const (
	receiptStoreModeRedis  = "redis"
	receiptStoreModeMemory = "memory"
)

func getAllowedOrigins() []string {
	raw := strings.TrimSpace(os.Getenv("ALLOWED_ORIGINS"))
	if raw == "" {
		return defaultAllowedOrigins
	}

	origins := make([]string, 0)
	for _, entry := range strings.Split(raw, ",") {
		origin := strings.TrimSpace(entry)
		if origin == "" {
			continue
		}
		if isValidAllowedOrigin(origin) {
			origins = append(origins, origin)
		} else {
			log.Printf("Warning: ignoring invalid ALLOWED_ORIGINS entry: %q", origin)
		}
	}
	if len(origins) == 0 {
		return defaultAllowedOrigins
	}

	return origins
}

func isValidAllowedOrigin(origin string) bool {
	parsed, err := url.Parse(origin)
	if err != nil {
		return false
	}
	if parsed.Scheme != "http" && parsed.Scheme != "https" {
		return false
	}
	if parsed.Host == "" || parsed.User != nil {
		return false
	}
	return parsed.Path == "" && parsed.RawQuery == "" && parsed.Fragment == ""
}

func getReceiptStoreMode() string {
	mode := strings.ToLower(strings.TrimSpace(os.Getenv("RECEIPT_STORE")))
	if mode == "" {
		return receiptStoreModeRedis
	}
	return mode
}

func validateReceiptStoreMode() error {
	switch getReceiptStoreMode() {
	case receiptStoreModeRedis, receiptStoreModeMemory:
		return nil
	default:
		return fmt.Errorf("RECEIPT_STORE must be %q or %q", receiptStoreModeRedis, receiptStoreModeMemory)
	}
}

func isRedisRequired() bool {
	return getCacheEnabled() || getReceiptStoreMode() == receiptStoreModeRedis
}

// getPositiveTimeout returns the configured timeout in seconds, but ensures a
// sensible default if the provided value is non-positive.
func getPositiveTimeout(envKey string, defaultSeconds int) time.Duration {
	seconds := getEnvAsInt(envKey, defaultSeconds)
	if seconds <= 0 {
		seconds = defaultSeconds
	}
	return time.Duration(seconds) * time.Second
}

// Timeout helpers (configurable via env vars)
func getRequestTimeout() time.Duration  { return getPositiveTimeout("REQUEST_TIMEOUT_SECONDS", 60) }
func getAITimeout() time.Duration       { return getPositiveTimeout("AI_REQUEST_TIMEOUT_SECONDS", 30) }
func getVerifierTimeout() time.Duration { return getPositiveTimeout("VERIFIER_TIMEOUT_SECONDS", 2) }
func getHealthCheckTimeout() time.Duration {
	return getPositiveTimeout("HEALTH_CHECK_TIMEOUT_SECONDS", 2)
}

// getMaxBodySize returns the maximum request body size in bytes, configured via
// the MAX_REQUEST_BODY_MB environment variable. Defaults to 10MB.
func getMaxBodySize() int64 {
	mb := getEnvAsInt("MAX_REQUEST_BODY_MB", 10)
	return int64(mb) * 1024 * 1024
}