/*
 * Copyright (C) 2015 Square, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package keywhiz.service.resources.automation;

import com.codahale.metrics.annotation.Timed;
import com.codahale.metrics.annotation.ExceptionMetered;
import io.dropwizard.auth.Auth;
import io.dropwizard.jersey.params.LongParam;
import java.util.HashMap;
import java.util.Map;
import javax.inject.Inject;
import javax.ws.rs.DELETE;
import javax.ws.rs.NotFoundException;
import javax.ws.rs.PUT;
import javax.ws.rs.Path;
import javax.ws.rs.PathParam;
import javax.ws.rs.Produces;
import javax.ws.rs.core.Response;
import keywhiz.api.model.AutomationClient;
import keywhiz.log.AuditLog;
import keywhiz.service.daos.AclDAO;
import keywhiz.service.daos.AclDAO.AclDAOFactory;
import keywhiz.service.resources.automation.v2.ClientResource;

import static javax.ws.rs.core.MediaType.APPLICATION_JSON;

/**
 * @parentEndpointName enroll-clients-automation
 * @resourceDescription Assign or unassign clients to groups
 * @deprecated Will be removed in a future release. Migrate to {@link ClientResource}.
 */
@Deprecated
@Path("/automation/clients/{clientId}/groups/{groupId}")
@Produces(APPLICATION_JSON)
public class AutomationEnrollClientGroupResource {
  private final AclDAO aclDAO;
  private final AuditLog auditLog;

  @Inject
  public AutomationEnrollClientGroupResource(AclDAOFactory aclDAOFactory, AuditLog auditLog) {
    this.aclDAO = aclDAOFactory.readwrite();
    this.auditLog = auditLog;
  }

  /**
   * Enroll Client in Group
   *
   * @param clientId the ID of the Client to assign
   * @param groupId the ID of the Group to be assigned to
   * @excludeParams automationClient
   * @description Assigns the Client specified by the clientID to the Group specified by the
   * groupID
   * @responseMessage 200 Successfully enrolled Client in Group
   * @responseMessage 404 Could not find Client or Group
   */
  @Timed @ExceptionMetered
  @PUT
  public Response enrollClientInGroup(
      @Auth AutomationClient automationClient,
      @PathParam("clientId") LongParam clientId,
      @PathParam("groupId") LongParam groupId) {

    try {
      Map<String, String> extraInfo = new HashMap<>();
      extraInfo.put("deprecated", "true");
      aclDAO.findAndEnrollClient(clientId.get(), groupId.get(), auditLog,
          automationClient.getName(), extraInfo);
    } catch (IllegalStateException e) {
      throw new NotFoundException();
    }

    return Response.ok().build();
  }

  /**
   * Remove Client from Group
   *
   * @param clientId the ID of the Client to unassign
   * @param groupId the ID of the Group to be removed from
   * @excludeParams automationClient
   * @description Unassigns the Client specified by the clientID from the Group specified by the
   * groupID
   * @responseMessage 200 Successfully removed Client from Group
   * @responseMessage 404 Could not find Client or Group
   */
  @Timed @ExceptionMetered
  @DELETE
  public Response evictClientFromGroup(
      @Auth AutomationClient automationClient,
      @PathParam("clientId") long clientId,
      @PathParam("groupId") long groupId) {

    try {
      Map<String, String> extraInfo = new HashMap<>();
      extraInfo.put("deprecated", "true");
      aclDAO.findAndEvictClient(clientId, groupId, auditLog, automationClient.getName(), extraInfo);
    } catch (IllegalStateException e) {
      throw new NotFoundException();
    }

    return Response.ok().build();
  }
}