/*
 * Copyright (c) 2023-2026, WSO2 LLC. (http://www.wso2.com).
 *
 * WSO2 LLC. licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except
 * in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.wso2.identity.integration.test.restclients;

import io.restassured.http.ContentType;
import org.apache.commons.codec.binary.Base64;
import org.apache.http.Header;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.message.BasicHeader;
import org.apache.http.util.EntityUtils;
import org.json.simple.JSONObject;
import org.testng.Assert;
import org.wso2.carbon.automation.engine.context.beans.Tenant;
import org.wso2.identity.integration.common.utils.ISIntegrationTest;
import org.wso2.identity.integration.test.rest.api.server.idp.v1.model.Claims;
import org.wso2.identity.integration.test.rest.api.server.idp.v1.model.FederatedAuthenticatorRequest.FederatedAuthenticator;
import org.wso2.identity.integration.test.rest.api.server.idp.v1.model.IdentityProviderPOSTRequest;
import org.wso2.identity.integration.test.rest.api.server.idp.v1.model.PatchRequest;
import org.wso2.identity.integration.test.rest.api.server.idp.v1.model.Roles;
import org.wso2.identity.integration.test.utils.OAuth2Constant;

import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.List;

public class IdpMgtRestClient extends RestBaseClient {

    private static final String CLAIMS_PATH = "/claims";
    private static final String FEDERATED_AUTHENTICATORS_PATH = "/federated-authenticators/";
    private static final String OUTBOUND_CONNECTORS_PATH = "/provisioning/outbound-connectors/";
    private final String serverUrl;
    private final String IDENTITY_PROVIDER_BASE_PATH = "/api/server/v1/identity-providers";
    private final String tenantDomain;
    private final String username;
    private final String password;

    public IdpMgtRestClient(String serverUrl, Tenant tenantInfo) {

        this.serverUrl = serverUrl;
        this.tenantDomain = tenantInfo.getContextUser().getUserDomain();
        this.username = tenantInfo.getContextUser().getUserName();
        this.password = tenantInfo.getContextUser().getPassword();
    }

    /**
     * Create an Identity Provider.
     *
     * @param idpCreateReqObj Identity Provider request object.
     * @throws Exception If an error occurred while creating an idp.
     */
    public String createIdentityProvider(IdentityProviderPOSTRequest idpCreateReqObj) throws Exception {
        String jsonRequest = toJSONString(idpCreateReqObj);
        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH, tenantDomain);

        try (CloseableHttpResponse response = getResponseOfHttpPost(endPointUrl, jsonRequest, getHeaders())) {
            Assert.assertEquals(response.getStatusLine().getStatusCode(), HttpServletResponse.SC_CREATED,
                    "Idp creation failed");
            JSONObject jsonResponse = getJSONObject(EntityUtils.toString(response.getEntity()));
            return jsonResponse.get("id").toString();
        }
    }

    /**
     * Get an Identity Provider by ID.
     *
     * @param idpId Identity Provider Id.
     * @return JSONObject with Identity Provider details.
     * @throws Exception If an error occurred while getting the idp.
     */
    public JSONObject getIdentityProvider(String idpId) throws Exception {

        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId;

        try (CloseableHttpResponse response = getResponseOfHttpGet(endPointUrl, getHeaders())) {
            String responseBody = EntityUtils.toString(response.getEntity());
            return getJSONObject(responseBody);
        }
    }

    /**
     * Get an Identity Provider's federated authenticator
     *
     * @param idpId                    identity provider id.
     * @param federatedAuthenticatorId Federated Authenticator id.
     * @return JSONObject with Federated Authenticator details.
     * @throws Exception If an error occurred while getting idp's federated authenticator.
     */
    public JSONObject getIdpFederatedAuthenticator(String idpId, String federatedAuthenticatorId) throws Exception {

        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId + FEDERATED_AUTHENTICATORS_PATH + federatedAuthenticatorId;

        try (CloseableHttpResponse response = getResponseOfHttpGet(endPointUrl, getHeaders())) {
            String responseBody = EntityUtils.toString(response.getEntity());
            return getJSONObject(responseBody);
        }
    }

    /**
     * Get an Identity Provider's outbound provisioning connector.
     *
     * @param idpId       Identity Provider Id.
     * @param connectorId Outbound connector id.
     * @return JSONObject with outbound connector details including properties.
     * @throws Exception If an error occurred while getting the outbound connector.
     */
    public JSONObject getIdpOutboundConnector(String idpId, String connectorId) throws Exception {

        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId + OUTBOUND_CONNECTORS_PATH + connectorId;

        try (CloseableHttpResponse response = getResponseOfHttpGet(endPointUrl, getHeaders())) {
            String responseBody = EntityUtils.toString(response.getEntity());
            return getJSONObject(responseBody);
        }
    }

    /**
     * Update an Identity Provider claim configurations.
     *
     * @param idpId     Identity Provider Id.
     * @param idpClaims Identity Provider claim request object.
     * @throws IOException If an error occurred while updating idp claim configurations.
     */
    public void updateIdpClaimConfig(String idpId, Claims idpClaims) throws IOException {

        String jsonRequest = toJSONString(idpClaims);
        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId + CLAIMS_PATH;

        try (CloseableHttpResponse response = getResponseOfHttpPut(endPointUrl, jsonRequest, getHeaders())) {
            Assert.assertEquals(response.getStatusLine().getStatusCode(), HttpServletResponse.SC_OK,
                    "Idp claim configurations update, failed");
        }
    }

    /**
     * Update an Identity Provider's roles configuration (outbound provisioning roles).
     *
     * @param idpId    Identity Provider Id.
     * @param idpRoles Roles configuration to set.
     * @throws IOException If an error occurred while updating idp roles.
     */
    public void updateIdpRoles(String idpId, Roles idpRoles) throws IOException {

        String jsonRequest = toJSONString(idpRoles);
        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId + "/roles";

        try (CloseableHttpResponse response = getResponseOfHttpPut(endPointUrl, jsonRequest, getHeaders())) {
            Assert.assertEquals(response.getStatusLine().getStatusCode(), HttpServletResponse.SC_OK,
                    "IdP roles update failed");
        }
    }

    /**
     * Patch an Identity Provider.
     *
     * @param idpId         Identity Provider Id.
     * @param patchRequests List of patch operations to apply.
     * @throws Exception If an error occurred while patching the IdP.
     */
    public void patchIdentityProvider(String idpId, List<PatchRequest> patchRequests) throws Exception {

        String jsonRequest = toJSONString(patchRequests);
        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId;

        try (CloseableHttpResponse response = getResponseOfHttpPatch(endPointUrl, jsonRequest, getHeaders())) {
            Assert.assertEquals(response.getStatusLine().getStatusCode(), HttpServletResponse.SC_OK,
                    "IdP patch failed");
        }
    }

    /**
     * Update a federated authenticator of an Identity Provider.
     *
     * @param idpId                    Identity Provider Id.
     * @param federatedAuthenticatorId Federated Authenticator Id.
     * @param authenticator            Updated federated authenticator configuration.
     * @throws Exception If an error occurred while updating the federated authenticator.
     */
    public void updateFederatedAuthenticator(String idpId, String federatedAuthenticatorId,
            FederatedAuthenticator authenticator) throws Exception {

        String jsonRequest = toJSONString(authenticator);
        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId + FEDERATED_AUTHENTICATORS_PATH + federatedAuthenticatorId;

        try (CloseableHttpResponse response = getResponseOfHttpPut(endPointUrl, jsonRequest, getHeaders())) {
            Assert.assertEquals(response.getStatusLine().getStatusCode(), HttpServletResponse.SC_OK,
                    "Federated authenticator update failed");
        }
    }

    /**
     * Delete an Identity Provider.
     *
     * @param idpId Identity Provider Id.
     * @throws IOException If an error occurred while deleting an idp.
     */
    public void deleteIdp(String idpId) throws IOException {

        String endPointUrl = serverUrl + ISIntegrationTest.getTenantedRelativePath(IDENTITY_PROVIDER_BASE_PATH,
                tenantDomain) + PATH_SEPARATOR + idpId;

        try (CloseableHttpResponse response = getResponseOfHttpDelete(endPointUrl, getHeaders())) {
            Assert.assertEquals(response.getStatusLine().getStatusCode(), HttpServletResponse.SC_NO_CONTENT,
                    "Idp deletion failed");
        }
    }

    private Header[] getHeaders() {

        Header[] headerList = new Header[3];
        headerList[0] = new BasicHeader(USER_AGENT_ATTRIBUTE, OAuth2Constant.USER_AGENT);
        headerList[1] = new BasicHeader(AUTHORIZATION_ATTRIBUTE, BASIC_AUTHORIZATION_ATTRIBUTE +
                Base64.encodeBase64String((username + ":" + password).getBytes()).trim());
        headerList[2] = new BasicHeader(CONTENT_TYPE_ATTRIBUTE, String.valueOf(ContentType.JSON));

        return headerList;
    }

    /**
     * Close the HTTP client.
     *
     * @throws IOException If an error occurred while closing the Http Client.
     */
    public void closeHttpClient() throws IOException {

        client.close();
    }
}
