package com.airlock.iam.oauth2.application.configuration.clientauthentication;

import com.airlock.iam.core.domain.model.http.HttpRequestHeader;
import com.airlock.iam.core.domain.model.http.HttpRequestParameter;
import com.airlock.iam.oauth2.api.domain.model.clientauthentication.ClientAuthenticationMethod;
import com.airlock.iam.oauth2.domain.model.client.OAuth2ClientSideCredentials;
import com.airlock.iam.oauth2.domain.model.client.communication.OAuth2TokenRequestClientSecretProcessor;
import com.airlock.iam.oauth2.domain.model.clientauthentication.method.KnownClientAuthenticationMethod;
import com.airlock.iam.plugin.api.annotation.config.Plugin;
import com.airlock.iam.plugin.api.annotation.license.PluginLicenseRestriction;
import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
import java.net.URI;
import java.util.List;

@Plugin(
   description = "No authentication of the client. <b>Security Warning:</b> Always use client authentication. Use this plugin only if the client is authenticated using another channel (for example client certificates).",
   displayName = "OAuth 2.0 No Client Secret Authentication"
)
@PluginLicenseRestriction(moduleAffiliation = "OAuthClient")
public final class OAuth2NoAuthenticationClientSecretConfig implements OAuth2TokenRequestClientSecretProcessor {
   public static final String OAUTH_2_BASIC_AUTH_CLIENT_SECRET = "OAuth 2.0 No Client Secret Authentication";

   @Override
   public void putClientSecretInRequestData(
      URI baseUri, List<HttpRequestParameter> params, List<HttpRequestHeader> headers, OAuth2ClientSideCredentials clientCredentials
   ) {
   }

   @Override
   public ClientAuthenticationMethod clientAuthenticationMethod() {
      return KnownClientAuthenticationMethod.NONE;
   }

   @SuppressFBWarnings(justification = "generated code")
   public static OAuth2NoAuthenticationClientSecretConfig.OAuth2NoAuthenticationClientSecretConfigBuilder builder() {
      return new OAuth2NoAuthenticationClientSecretConfig.OAuth2NoAuthenticationClientSecretConfigBuilder();
   }

   @SuppressFBWarnings(justification = "generated code")
   public static class OAuth2NoAuthenticationClientSecretConfigBuilder {
      @SuppressFBWarnings(justification = "generated code")
      OAuth2NoAuthenticationClientSecretConfigBuilder() {
      }

      @SuppressFBWarnings(justification = "generated code")
      public OAuth2NoAuthenticationClientSecretConfig build() {
         return new OAuth2NoAuthenticationClientSecretConfig();
      }

      @SuppressFBWarnings(justification = "generated code")
      @Override
      public String toString() {
         return "OAuth2NoAuthenticationClientSecretConfig.OAuth2NoAuthenticationClientSecretConfigBuilder()";
      }
   }
}