/*
 * Copyright (c) 2025, WSO2 LLC. (http://www.wso2.com).
 *
 * WSO2 LLC. licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except
 * in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.wso2.identity.integration.test.restclients;

import com.fasterxml.jackson.core.JsonFactory;
import com.fasterxml.jackson.databind.ObjectMapper;
import io.restassured.http.ContentType;
import org.apache.commons.codec.binary.Base64;
import org.apache.http.Header;
import org.apache.http.HttpStatus;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.message.BasicHeader;
import org.apache.http.util.EntityUtils;
import org.testng.Assert;
import org.wso2.carbon.automation.engine.context.beans.Tenant;
import org.wso2.carbon.utils.multitenancy.MultitenantConstants;
import org.wso2.identity.integration.test.rest.api.server.credential.management.v1.model.Credential;
import org.wso2.identity.integration.test.utils.OAuth2Constant;

import java.io.IOException;

import static java.net.HttpURLConnection.HTTP_OK;

/**
 * Rest client which provides methods to interact with the Credential Management REST API.
 */
public class CredentialManagementRestClient extends RestBaseClient {

    private static final String CREDENTIAL_MANAGEMENT_API_PATH = "users";
    private static final String CREDENTIALS_PATH = "/credentials";
    private final String tenantDomain;
    private final String username;
    private final String password;
    private final String credentialManagementBasePath;

    public CredentialManagementRestClient(String serverUrl, Tenant tenantInfo) {

        this.tenantDomain = tenantInfo.getContextUser().getUserDomain();
        this.username = tenantInfo.getContextUser().getUserName();
        this.password = tenantInfo.getContextUser().getPassword();
        this.credentialManagementBasePath = getCredentialMgtPath(serverUrl, tenantDomain);
    }

    /**
     * Get credentials for a user.
     *
     * @param userId User ID.
     * @return Credential array.
     * @throws Exception If an error occurs while getting credentials.
     */
    public Credential[] getUserCredentials(String userId) throws Exception {

        String credentialsPath = credentialManagementBasePath + PATH_SEPARATOR + userId + CREDENTIALS_PATH;
        try (CloseableHttpResponse response = getResponseOfHttpGet(credentialsPath, getHeadersWithBasicAuth())) {
            if (response.getStatusLine().getStatusCode() != HTTP_OK) {
                throw new Exception("Error code " + response.getStatusLine().getStatusCode() +
                        " occurred while getting credentials for user: " + userId);
            }
            String responseBody = EntityUtils.toString(response.getEntity());
            ObjectMapper jsonWriter = new ObjectMapper(new JsonFactory());
            return jsonWriter.readValue(responseBody, Credential[].class);
        }
    }

    /**
     * Delete a credential for a user.
     *
     * @param userId       User ID.
     * @param type         Credential type.
     * @param credentialId Credential ID.
     * @throws Exception If an error occurs while deleting the credential.
     */
    public void deleteUserCredential(String userId, String type, String credentialId) throws Exception {

        String credentialPath = credentialManagementBasePath + PATH_SEPARATOR + userId + CREDENTIALS_PATH +
                PATH_SEPARATOR + type + PATH_SEPARATOR + credentialId;
        try (CloseableHttpResponse response = getResponseOfHttpDelete(credentialPath, getHeadersWithBasicAuth())) {
            int responseStatusCode = response.getStatusLine().getStatusCode();
            Assert.assertTrue(responseStatusCode == HttpStatus.SC_NO_CONTENT ||
                            responseStatusCode== HttpStatus.SC_BAD_REQUEST,
                    "Expected 204 or 400 but got: " + responseStatusCode);
        }
    }

    /**
     * Close the HTTP client.
     *
     * @throws IOException If an error occurred while closing the Http Client.
     */
    public void closeHttpClient() throws IOException {

        client.close();
    }

    private String getCredentialMgtPath(String serverUrl, String tenantDomain) {

        if (tenantDomain.equals(MultitenantConstants.SUPER_TENANT_DOMAIN_NAME)) {
            return serverUrl + API_SERVER_PATH + PATH_SEPARATOR + CREDENTIAL_MANAGEMENT_API_PATH;
        }
        return serverUrl + TENANT_PATH + tenantDomain + PATH_SEPARATOR + API_SERVER_PATH + PATH_SEPARATOR +
                CREDENTIAL_MANAGEMENT_API_PATH;
    }

    private Header[] getHeadersWithBasicAuth() {

        Header[] headerList = new Header[3];
        headerList[0] = new BasicHeader(USER_AGENT_ATTRIBUTE, OAuth2Constant.USER_AGENT);
        headerList[1] = new BasicHeader(AUTHORIZATION_ATTRIBUTE, BASIC_AUTHORIZATION_ATTRIBUTE +
                Base64.encodeBase64String((username + ":" + password).getBytes()).trim());
        headerList[2] = new BasicHeader(CONTENT_TYPE_ATTRIBUTE, String.valueOf(ContentType.JSON));

        return headerList;
    }
}
