# -*- coding: utf-8 -*- #
# Copyright 2020 Google LLC. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""Hooks for Privateca surface."""

from __future__ import absolute_import
from __future__ import division
from __future__ import unicode_literals

from googlecloudsdk.api_lib.privateca import base
from googlecloudsdk.api_lib.privateca import request_utils
from googlecloudsdk.command_lib.privateca import resource_args
from googlecloudsdk.core.util import times


def CheckResponseSubordinateTypeHook(version='v1'):
  """Raises an exception if the response is not a subordinate ca."""

  def CheckResponseSubordinateTypeHookVersioned(response, unused_args):
    resource_args.CheckExpectedCAType(
        base.GetMessagesModule(
            api_version=version
        ).CertificateAuthority.TypeValueValuesEnum.SUBORDINATE,
        response,
        version=version,
    )

    return response

  return CheckResponseSubordinateTypeHookVersioned


def CheckResponseRootTypeHook(version='v1'):
  """Raises an exception if the response is not a root ca."""

  def CheckResponseRootTypeHookVersioned(response, unused_args):
    resource_args.CheckExpectedCAType(
        base.GetMessagesModule(
            api_version=version
        ).CertificateAuthority.TypeValueValuesEnum.SELF_SIGNED,
        response,
        version=version,
    )
    return response

  return CheckResponseRootTypeHookVersioned


def _CheckRequestTypeHook(resource_ref, expected_type, version='v1'):
  """Do a get on a CA resource and check its type against expected_type."""
  client = base.GetClientInstance(api_version=version)
  messages = base.GetMessagesModule(api_version=version)
  certificate_authority = client.projects_locations_caPools_certificateAuthorities.Get(
      messages.PrivatecaProjectsLocationsCaPoolsCertificateAuthoritiesGetRequest(
          name=resource_ref.RelativeName()
      )
  )

  resource_args.CheckExpectedCAType(expected_type, certificate_authority)


def CheckRequestRootTypeHook(version='v1'):
  """Raises an exception if the request is not for a root ca."""

  def CheckRequestRootTypeHookVersioned(resource_ref, unused_args, request):
    _CheckRequestTypeHook(
        resource_ref,
        base.GetMessagesModule(
            api_version=version
        ).CertificateAuthority.TypeValueValuesEnum.SELF_SIGNED,
    )

    return request

  return CheckRequestRootTypeHookVersioned


def CheckRequestSubordinateTypeHook(version='v1'):
  """Raises an exception if the request is not for a subordinate ca."""

  def CheckRequestSubordinateTypeHookVersioned(
      resource_ref, unused_args, request
  ):
    _CheckRequestTypeHook(
        resource_ref,
        base.GetMessagesModule(
            api_version=version
        ).CertificateAuthority.TypeValueValuesEnum.SUBORDINATE,
    )
    return request

  return CheckRequestSubordinateTypeHookVersioned


def AddRequestIdHook(unused_ref, unused_args, request):
  """Fills a unique identifier for a request with a requestId field."""
  request.requestId = request_utils.GenerateRequestId()
  return request


def _ConvertProtoToIsoDuration(proto_duration_str):
  """Convert a given 'proto duration' string to an ISO8601 duration string."""
  return times.FormatDuration(times.ParseDuration(proto_duration_str, True))


def ConvertCertificateLifetimeToIso8601(response, unused_args):
  """Converts certificate lifetimes from proto duration format to ISO8601."""

  # These fields could be None if the user specifies a filter that omits them.
  if response.lifetime:
    response.lifetime = _ConvertProtoToIsoDuration(response.lifetime)
  if (
      response.certificateDescription
      and response.certificateDescription.subjectDescription
      and response.certificateDescription.subjectDescription.lifetime
  ):
    response.certificateDescription.subjectDescription.lifetime = (
        _ConvertProtoToIsoDuration(
            response.certificateDescription.subjectDescription.lifetime
        )
    )

  return response