# Copyright (C) 2019  Lars Wirzenius
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.


import time


import jwt


import ick2


class TokenGetter:

    scopes = [
        'super',
        'create',
        'update',
        'show',
        'delete',
        'uapi_workers_post',
        'uapi_workers_id_get',
        'uapi_workers_id_put',
        'uapi_workers_id_delete',
        'uapi_builds_post',
        'uapi_builds_id_get',
        'uapi_builds_id_put',
        'uapi_builds_id_delete',
        'uapi_logs_post',
        'uapi_logs_id_get',
        'uapi_logs_id_put',
        'uapi_logs_id_delete',
    ]

    def __init__(self, client_id, client_secret):
        self._ac = ick2.AuthClient()
        self._ac.set_client_creds(client_id, client_secret)
        self._token = None
        self._token_exp = None

    def set_auth_url(self, auth_url):
        self._ac.set_auth_url(auth_url)

    def get_token(self):
        if not self._got_valid_token():
            self._get_new_token()
        return self._token

    def _got_valid_token(self):
        fuzz = 10
        return (self._token is not None and
                self._token_exp is not None and
                time.time() + fuzz < self._token_exp)

    def _get_new_token(self):
        self._token = self._ac.get_token(' '.join(self.scopes))
        parsed = jwt.decode(self._token, verify=False)
        self._token_exp = parsed['exp']