package rpc

import "github.com/iamxvbaba/td/tg"

// rpcAllowedWithoutAuthorization returns true for methods that are valid before
// an auth key is bound to a user. Everything else must fail with
// AUTH_KEY_UNREGISTERED so stale Web/desktop sessions fall back to login.
//
// Inbound layer/client-drift upgrades run before this gate (see router.dispatch),
// so ids here are always canonical (227) — old client constructor ids never reach
// this check.
func rpcAllowedWithoutAuthorization(id uint32) bool {
	switch id {
	case tg.AuthBindTempAuthKeyRequestTypeID,
		tg.AuthExportLoginTokenRequestTypeID,
		tg.AuthImportLoginTokenRequestTypeID,
		tg.AuthAcceptLoginTokenRequestTypeID,
		tg.AuthInitPasskeyLoginRequestTypeID,
		tg.AuthFinishPasskeyLoginRequestTypeID,
		tg.AuthDropTempAuthKeysRequestTypeID,
		tg.AuthSendCodeRequestTypeID,
		tg.AuthResendCodeRequestTypeID,
		tg.AuthCancelCodeRequestTypeID,
		tg.AuthSignInRequestTypeID,
		tg.AuthSignUpRequestTypeID,
		tg.AuthImportBotAuthorizationRequestTypeID,
		// auth.importAuthorization authenticates a FRESH connection (e.g. the
		// client opening a second connection for what it believes is a
		// different data-center, typically to fetch media/files) by proving
		// the identity exported from an already-authorized connection via
		// auth.exportAuthorization — it must be reachable before this
		// connection's own auth_key has been bound to a user.
		tg.AuthImportAuthorizationRequestTypeID,
		tg.AuthCheckPasswordRequestTypeID,
		tg.AuthRequestPasswordRecoveryRequestTypeID,
		tg.AuthRecoverPasswordRequestTypeID,
		tg.AuthCheckRecoveryPasswordRequestTypeID,
		tg.AuthRequestFirebaseSMSRequestTypeID,
		tg.AuthReportMissingCodeRequestTypeID,
		tg.AuthResetLoginEmailRequestTypeID,
		tg.AccountGetPasswordRequestTypeID,
		// 登录邮箱 setup（emailVerifyPurposeLoginSetup）发生在登录流程中、尚未鉴权，
		// 故这两个 account.* 方法必须放行 pre-auth；loginChange 分支内部仍校验 userID。
		tg.AccountSendVerifyEmailCodeRequestTypeID,
		tg.AccountVerifyEmailRequestTypeID,
		tg.HelpGetConfigRequestTypeID,
		tg.HelpGetNearestDCRequestTypeID,
		tg.HelpGetInviteTextRequestTypeID,
		tg.HelpGetAppConfigRequestTypeID,
		tg.HelpGetCountriesListRequestTypeID,
		tg.HelpGetTimezonesListRequestTypeID,
		tg.HelpGetPeerColorsRequestTypeID,
		tg.HelpGetPeerProfileColorsRequestTypeID,
		tg.HelpGetPromoDataRequestTypeID,
		tg.HelpGetTermsOfServiceUpdateRequestTypeID,
		tg.HelpGetPremiumPromoRequestTypeID,
		tg.LangpackGetLanguagesRequestTypeID,
		tg.LangpackGetLanguageRequestTypeID,
		tg.LangpackGetLangPackRequestTypeID,
		tg.LangpackGetDifferenceRequestTypeID,
		tg.LangpackGetStringsRequestTypeID:
		return true
	default:
		return false
	}
}