/*
 * Copyright 2017-2018, EnMasse authors.
 * License: Apache License 2.0 (see the file LICENSE or http://apache.org/licenses/LICENSE-2.0.html).
 */
package io.enmasse.user.model.v1;

import com.fasterxml.jackson.annotation.JsonCreator;
import com.fasterxml.jackson.annotation.JsonInclude;
import com.fasterxml.jackson.annotation.JsonProperty;

import io.fabric8.kubernetes.api.model.Doneable;
import io.sundr.builder.annotations.Buildable;
import io.sundr.builder.annotations.Inline;

import java.util.List;
import java.util.Objects;
import java.util.regex.Pattern;

@Buildable(
        editableEnabled = false,
        generateBuilderPackage = false,
        builderPackage = "io.fabric8.kubernetes.api.builder",
        inline = @Inline(
                type = Doneable.class,
                prefix = "Doneable",
                value = "done"
                )
        )
@JsonInclude(JsonInclude.Include.NON_NULL)
public class UserSpec {
    private final static Pattern USERNAME_PATTERN = Pattern.compile("^[a-z0-9]+([a-z0-9_@.:\\-]*[a-z0-9]+|[a-z0-9]*)$");

    private final String username;
    private final UserAuthentication authentication;
    private final List<UserAuthorization> authorization;

    @JsonCreator
    public UserSpec(@JsonProperty("username") String username,
                    @JsonProperty("authentication") UserAuthentication authentication,
                    @JsonProperty("authorization") List<UserAuthorization> authorization) {
        this.username = username;
        this.authentication = authentication;
        this.authorization = authorization;
    }

    public String getUsername() {
        return username;
    }

    public UserAuthentication getAuthentication() {
        return authentication;
    }

    public List<UserAuthorization> getAuthorization() {
        return authorization;
    }

    public void validate() {
        Objects.requireNonNull(username, "'username' must be set");
        if (!USERNAME_PATTERN.matcher(username).matches()) {
            throw new UserValidationFailedException("Invalid username '" + username + "', must match " + USERNAME_PATTERN.toString());
        }

        if (authentication != null) {
            authentication.validate();
        }

        if (authorization != null) {
            for (UserAuthorization authz : authorization) {
                authz.validate();
            }
        }
    }
}
