// Copyright 2019 Yunion
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package hcso

import (
	"time"

	"yunion.io/x/jsonutils"
	"yunion.io/x/pkg/errors"

	api "yunion.io/x/cloudmux/pkg/apis/cloudid"
	"yunion.io/x/cloudmux/pkg/cloudprovider"
	"yunion.io/x/cloudmux/pkg/multicloud"
	"yunion.io/x/cloudmux/pkg/multicloud/hcso/client/modules"
)

type SLink struct {
	Next     string
	Previous string
	Self     string
}

type SClouduser struct {
	client *SHuaweiClient
	multicloud.SBaseClouduser

	Description       string
	DomainId          string
	Enabled           bool
	ForceResetPwd     bool
	Id                string
	LastProjectId     string
	Links             SLink
	Name              string
	PasswordExpiresAt string
	PwdStatus         bool
}

func (user *SClouduser) GetGlobalId() string {
	return user.Id
}

func (user *SClouduser) GetName() string {
	return user.Name
}

func (user *SClouduser) GetEmailAddr() string {
	return ""
}

func (user *SClouduser) GetInviteUrl() string {
	return ""
}

func (user *SClouduser) GetICloudpolicies() ([]cloudprovider.ICloudpolicy, error) {
	return []cloudprovider.ICloudpolicy{}, nil
}

func (user *SClouduser) AttachPolicy(policyName string, policyType api.TPolicyType) error {
	return cloudprovider.ErrNotSupported
}

func (user *SClouduser) DetachPolicy(policyName string, policyType api.TPolicyType) error {
	return cloudprovider.ErrNotSupported
}

func (user *SClouduser) GetICloudgroups() ([]cloudprovider.ICloudgroup, error) {
	groups, err := user.client.ListUserGroups(user.Id)
	if err != nil {
		return nil, errors.Wrap(err, "Users.ListGroups")
	}
	ret := []cloudprovider.ICloudgroup{}
	for i := range groups {
		groups[i].client = user.client
		ret = append(ret, &groups[i])
	}
	return ret, nil
}

func (user *SClouduser) Delete() error {
	return user.client.DeleteClouduser(user.Id)
}

func (user *SClouduser) IsConsoleLogin() bool {
	return user.Enabled == true
}

func (user *SClouduser) ResetPassword(password string) error {
	return user.client.ResetClouduserPassword(user.Id, password)
}

func (self *SHuaweiClient) DeleteClouduser(id string) error {
	client, err := self.newGeneralAPIClient()
	if err != nil {
		return errors.Wrap(err, "newGeneralAPIClient")
	}
	_, err = client.Users.Delete(id)
	return err
}

func (self *SHuaweiClient) ListUserGroups(userId string) ([]SCloudgroup, error) {
	client, err := self.newGeneralAPIClient()
	if err != nil {
		return nil, errors.Wrap(err, "newGeneralAPIClient")
	}
	result, err := client.Users.ListGroups(userId)
	if err != nil {
		return nil, errors.Wrap(err, "Users.ListGroups")
	}
	groups := []SCloudgroup{}
	err = jsonutils.Update(&groups, result.Data)
	if err != nil {
		return nil, errors.Wrap(err, "jsonutils.Update")
	}
	return groups, nil
}

func (self *SHuaweiClient) GetCloudusers(name string) ([]SClouduser, error) {
	params := map[string]string{}
	if len(name) > 0 {
		params["name"] = name
	}
	users := []SClouduser{}
	client, err := self.newGeneralAPIClient()
	if err != nil {
		return nil, errors.Wrap(err, "newGeneralAPIClient")
	}
	err = doListAllWithOffset(client.Users.List, params, &users)
	if err != nil {
		return nil, errors.Wrap(err, "doListAllWithOffset")
	}
	return users, nil
}

func (self *SHuaweiClient) GetICloudusers() ([]cloudprovider.IClouduser, error) {
	users, err := self.GetCloudusers("")
	if err != nil {
		return nil, errors.Wrap(err, "GetCloudusers")
	}
	iUsers := []cloudprovider.IClouduser{}
	for i := range users {
		if users[i].Name != self.ownerName {
			users[i].client = self
			iUsers = append(iUsers, &users[i])
		}
	}
	return iUsers, nil
}

func (self *SHuaweiClient) GetIClouduserByName(name string) (cloudprovider.IClouduser, error) {
	users, err := self.GetCloudusers(name)
	if err != nil {
		return nil, errors.Wrapf(err, "GetCloudusers(%s)", name)
	}
	if len(users) == 0 {
		return nil, cloudprovider.ErrNotFound
	}
	if len(users) > 1 {
		return nil, cloudprovider.ErrDuplicateId
	}
	users[0].client = self
	return &users[0], nil
}

func (self *SHuaweiClient) CreateIClouduser(conf *cloudprovider.SClouduserCreateConfig) (cloudprovider.IClouduser, error) {
	return self.CreateClouduser(conf.Name, conf.Password, conf.Desc)
}

func (self *SHuaweiClient) CreateClouduser(name, password, desc string) (*SClouduser, error) {
	params := map[string]string{
		"name":      name,
		"domain_id": self.ownerId,
	}
	if len(password) > 0 {
		params["password"] = password
	}
	if len(desc) > 0 {
		params["description"] = desc
	}
	client, err := self.newGeneralAPIClient()
	if err != nil {
		return nil, errors.Wrap(err, "newGeneralAPIClient")
	}
	user := SClouduser{client: self}
	err = DoCreate(client.Users.Create, jsonutils.Marshal(map[string]interface{}{"user": params}), &user)
	if err != nil {
		ce, ok := err.(*modules.HuaweiClientError)
		if ok && len(ce.Errorcode) > 0 && ce.Errorcode[0] == "1101" {
			return nil, errors.Wrap(err, `IAM user name. The length is between 5 and 32. The first digit is not a number. Special characters can only contain the '_' '-' or ' '`) //https://support.huaweicloud.com/api-iam/iam_08_0015.html
		}
		return nil, errors.Wrap(err, "DoCreate")
	}
	return &user, nil
}

func (self *SHuaweiClient) ResetClouduserPassword(id, password string) error {
	client, err := self.newGeneralAPIClient()
	if err != nil {
		return errors.Wrap(err, "newGeneralAPIClient")
	}
	return client.Users.ResetPassword(id, password)
}

type SAccessKey struct {
	client *SHuaweiClient

	AccessKey   string    `json:"access"`
	Secret      string    `json:"secret"`
	Description string    `json:"description"`
	Status      string    `json:"status"`
	CreatedAt   time.Time `json:"create_time"`
}

func (self *SHuaweiClient) GetAKSK(id string) ([]cloudprovider.SAccessKey, error) {
	obj, err := self.getAKSKList(id)
	if err != nil {
		return nil, errors.Wrap(err, "SHuaweiClient.getAKSKList")
	}
	aks := make([]SAccessKey, 0)
	obj.Unmarshal(&aks, "credentials")
	res := make([]cloudprovider.SAccessKey, len(aks))
	for i := 0; i < len(aks); i++ {
		res[i].Name = aks[i].Description
		res[i].AccessKey = aks[i].AccessKey
		res[i].Secret = aks[i].Secret
		res[i].Status = aks[i].Status
		res[i].CreatedAt = aks[i].CreatedAt
	}
	return res, nil
}

func (self *SHuaweiClient) CreateAKSK(id, name string) (*cloudprovider.SAccessKey, error) {
	params := map[string]interface{}{
		"credential": map[string]interface{}{
			"user_id":     id,
			"description": name,
		},
	}
	obj, err := self.createAKSK(params)
	if err != nil {
		return nil, errors.Wrap(err, "SHuaweiClient.createAKSK")
	}
	ak := SAccessKey{}
	obj.Unmarshal(&ak, "credential")
	res := cloudprovider.SAccessKey{
		Name:      ak.Description,
		AccessKey: ak.AccessKey,
		Secret:    ak.Secret,
	}
	return &res, nil
}

func (self *SHuaweiClient) DeleteAKSK(accessKey string) error {
	_, err := self.deleteAKSK(accessKey)
	return err
}

func (user *SClouduser) DeleteAccessKey(accessKey string) error {
	err := user.client.DeleteAKSK(accessKey)
	if err != nil {
		return errors.Wrap(err, "SHuaweiClient.deleteAKSK")
	}
	return nil
}

func (user *SClouduser) CreateAccessKey(name string) (*cloudprovider.SAccessKey, error) {
	return user.client.CreateAKSK(user.Id, name)
}

func (user *SClouduser) GetAccessKeys() ([]cloudprovider.SAccessKey, error) {
	return user.client.GetAKSK(user.Id)
}