const DEFAULT_SIGN_IN_REDIRECT = "/account";

export const normalizeLocalPath = (value: string | null | undefined, fallback = DEFAULT_SIGN_IN_REDIRECT): string => {
  if (!value || !value.startsWith("/") || value.startsWith("//") || value.includes("\\")) {
    return fallback;
  }

  try {
    const parsed = new URL(value, window.location.origin);
    if (parsed.origin !== window.location.origin) return fallback;
    return `${parsed.pathname}${parsed.search}${parsed.hash}`;
  } catch {
    return fallback;
  }
};

export const signInPath = (redirectTo: string): string =>
  `/sign-in?redirect=${encodeURIComponent(normalizeLocalPath(redirectTo))}`;