package com.airlock.iam.oauth2.application.configuration.openid.signature;

import com.airlock.iam.common.domain.model.jwt.SignatureVerificationInformation;
import com.airlock.iam.oauth2.domain.model.client.OAuth2Client;
import com.airlock.iam.oauth2.domain.model.token.IdToken;
import com.airlock.iam.oauth2.domain.model.token.IdTokenBuilder;
import com.airlock.iam.oauth2.domain.model.token.OpenIDConnectIDTokenSigner;
import com.airlock.iam.plugin.api.annotation.config.Plugin;
import com.airlock.iam.plugin.api.annotation.license.PluginLicenseRestriction;
import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
import java.util.Optional;

@Plugin(
   description = "ID tokens will not be signed. <p><b>Security Warning:</b> ID tokens should always be signed. Do not use this plugin unless the client is unable to verify the signature.</p>",
   displayName = "OIDC ID Token No Signature"
)
@PluginLicenseRestriction(moduleAffiliation = "OAuthServer")
public class OpenIDConnectIDTokenNoSignatureSigner implements OpenIDConnectIDTokenSigner {
   @Override
   public IdToken signed(IdTokenBuilder idTokenBuilder, OAuth2Client client) {
      return idTokenBuilder.unsigned();
   }

   @Override
   public Optional<SignatureVerificationInformation> signatureVerificationInformation() {
      return Optional.empty();
   }

   @Override
   public Optional<String> algorithm() {
      return Optional.empty();
   }

   @SuppressFBWarnings(justification = "generated code")
   public static OpenIDConnectIDTokenNoSignatureSigner.OpenIDConnectIDTokenNoSignatureSignerBuilder builder() {
      return new OpenIDConnectIDTokenNoSignatureSigner.OpenIDConnectIDTokenNoSignatureSignerBuilder();
   }

   @SuppressFBWarnings(justification = "generated code")
   public static class OpenIDConnectIDTokenNoSignatureSignerBuilder {
      @SuppressFBWarnings(justification = "generated code")
      OpenIDConnectIDTokenNoSignatureSignerBuilder() {
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenNoSignatureSigner build() {
         return new OpenIDConnectIDTokenNoSignatureSigner();
      }

      @SuppressFBWarnings(justification = "generated code")
      @Override
      public String toString() {
         return "OpenIDConnectIDTokenNoSignatureSigner.OpenIDConnectIDTokenNoSignatureSignerBuilder()";
      }
   }
}