package com.airlock.iam.oauth2.application.configuration.openid.signature;

import com.airlock.iam.common.domain.model.jwt.SignatureVerificationInformation;
import com.airlock.iam.oauth2.application.configuration.signature.PrivateKeyJwtSignatureConfig;
import com.airlock.iam.oauth2.domain.model.client.OAuth2Client;
import com.airlock.iam.oauth2.domain.model.token.IdToken;
import com.airlock.iam.oauth2.domain.model.token.IdTokenBuilder;
import com.airlock.iam.oauth2.domain.model.token.OpenIDConnectIDTokenSigner;
import com.airlock.iam.plugin.api.annotation.config.Plugin;
import com.airlock.iam.plugin.api.annotation.license.PluginLicenseRestriction;
import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
import java.io.File;
import java.util.Optional;

@Plugin(description = "ID tokens will be signed using a private key signature.", displayName = "OIDC ID Token Private Key Signature")
@PluginLicenseRestriction(moduleAffiliation = "OAuthServer")
public final class OpenIDConnectIDTokenPrivateKeySignatureSigner extends PrivateKeyJwtSignatureConfig implements OpenIDConnectIDTokenSigner {
   public OpenIDConnectIDTokenPrivateKeySignatureSigner(
      PrivateKeyJwtSignatureConfig.Algorithm algorithm, File keystoreFile, String keystorePassword, String signingKeyAlias, String signingKeyPassword
   ) {
      super(algorithm, keystoreFile, keystorePassword, signingKeyAlias, signingKeyPassword);
   }

   @Override
   public IdToken signed(IdTokenBuilder idTokenBuilder, OAuth2Client client) throws IdTokenBuilder.IdTokenException {
      return idTokenBuilder.sign(this.getSigner());
   }

   @Override
   public Optional<SignatureVerificationInformation> signatureVerificationInformation() {
      return Optional.of(this.getSignatureVerificationInformation());
   }

   @Override
   public Optional<String> algorithm() {
      return Optional.of(this.getAlgorithm().getAlgorithm().name());
   }

   @Override
   protected boolean isIncludeKid() {
      return true;
   }

   @SuppressFBWarnings(justification = "generated code")
   public static OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder builder() {
      return new OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder();
   }

   @SuppressFBWarnings(justification = "generated code")
   public OpenIDConnectIDTokenPrivateKeySignatureSigner() {
   }

   @SuppressFBWarnings(justification = "generated code")
   public static class OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder {
      @SuppressFBWarnings(justification = "generated code")
      private PrivateKeyJwtSignatureConfig.Algorithm algorithm;
      @SuppressFBWarnings(justification = "generated code")
      private File keystoreFile;
      @SuppressFBWarnings(justification = "generated code")
      private String keystorePassword;
      @SuppressFBWarnings(justification = "generated code")
      private String signingKeyAlias;
      @SuppressFBWarnings(justification = "generated code")
      private String signingKeyPassword;

      @SuppressFBWarnings(justification = "generated code")
      OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder() {
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder algorithm(
         PrivateKeyJwtSignatureConfig.Algorithm algorithm
      ) {
         this.algorithm = algorithm;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder keystoreFile(File keystoreFile) {
         this.keystoreFile = keystoreFile;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder keystorePassword(String keystorePassword) {
         this.keystorePassword = keystorePassword;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder signingKeyAlias(String signingKeyAlias) {
         this.signingKeyAlias = signingKeyAlias;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder signingKeyPassword(String signingKeyPassword) {
         this.signingKeyPassword = signingKeyPassword;
         return this;
      }

      @SuppressFBWarnings(justification = "generated code")
      public OpenIDConnectIDTokenPrivateKeySignatureSigner build() {
         return new OpenIDConnectIDTokenPrivateKeySignatureSigner(
            this.algorithm, this.keystoreFile, this.keystorePassword, this.signingKeyAlias, this.signingKeyPassword
         );
      }

      @SuppressFBWarnings(justification = "generated code")
      @Override
      public String toString() {
         return "OpenIDConnectIDTokenPrivateKeySignatureSigner.OpenIDConnectIDTokenPrivateKeySignatureSignerBuilder(algorithm="
            + this.algorithm
            + ", keystoreFile="
            + this.keystoreFile
            + ", keystorePassword="
            + this.keystorePassword
            + ", signingKeyAlias="
            + this.signingKeyAlias
            + ", signingKeyPassword="
            + this.signingKeyPassword
            + ")";
      }
   }
}