/*
 * Copyright 2017 Baidu, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file
 * except in compliance with the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software distributed under the
 * License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
 * either express or implied. See the License for the specific language governing permissions
 * and limitations under the License.
 */

// securityGroup.go - the securityGroup APIs definition supported by the BCC service

// Package api defines all APIs supported by the BCC service of BCE.
package api

import (
	"encoding/json"
	"fmt"
	"strconv"

	"github.com/baidubce/bce-sdk-go/bce"
	"github.com/baidubce/bce-sdk-go/http"
)

// CreateSecurityGroup - create a security group and related rules
//
// PARAMS:
//   - cli: the client agent which can perform sending request
//   - args: the arguments to create security group
//   - :
//
// RETURNS:
//   - *CreateSecurityGroupResult: result of the security group id
//   - error: nil if success otherwise the specific error
func CreateSecurityGroup(cli bce.Client, args *CreateSecurityGroupArgs) (*CreateSecurityGroupResult, error) {
	// Build the request
	req := &bce.BceRequest{}
	req.SetUri(getSecurityGroupUri())
	req.SetMethod(http.POST)

	if args.ClientToken != "" {
		req.SetParam("clientToken", args.ClientToken)
	}

	jsonBytes, err := json.Marshal(args)
	if err != nil {
		return nil, err
	}
	body, err := bce.NewBodyFromBytes(jsonBytes)
	if err != nil {
		return nil, err
	}
	req.SetBody(body)

	// Send request and get response
	resp := &bce.BceResponse{}
	if err := cli.SendRequest(req, resp); err != nil {
		return nil, err
	}
	if resp.IsFail() {
		return nil, resp.ServiceError()
	}

	jsonBody := &CreateSecurityGroupResult{}
	if err := resp.ParseJsonBody(jsonBody); err != nil {
		return nil, err
	}
	return jsonBody, nil
}

// ListSecurityGroup - list all security groups with the specified parameters
//
// PARAMS:
//   - cli: the client agent which can perform sending request
//   - queryArgs: the arguments to list security groups
//
// RETURNS:
//   - *ListSecurityGroupResult: result of the security group list
//   - error: nil if success otherwise the specific error
func ListSecurityGroup(cli bce.Client, queryArgs *ListSecurityGroupArgs) (*ListSecurityGroupResult, error) {
	// Build the request
	req := &bce.BceRequest{}
	req.SetUri(getSecurityGroupUri())
	req.SetMethod(http.GET)

	if queryArgs != nil {
		if len(queryArgs.InstanceId) != 0 {
			req.SetParam("instanceId", queryArgs.InstanceId)
		}
		if len(queryArgs.VpcId) != 0 {
			req.SetParam("vpcId", queryArgs.VpcId)
		}
		if len(queryArgs.Marker) != 0 {
			req.SetParam("marker", queryArgs.Marker)
		}
		if queryArgs.MaxKeys != 0 {
			req.SetParam("maxKeys", strconv.Itoa(queryArgs.MaxKeys))
		}
        if len(queryArgs.SecurityGroupId) != 0{
            req.SetParam("securityGroupId", queryArgs.SecurityGroupId)
        }
        if len(queryArgs.SecurityGroupIds) != 0{
            req.SetParam("securityGroupIds", queryArgs.SecurityGroupIds)
        }
	}

	if queryArgs == nil || queryArgs.MaxKeys == 0 {
		req.SetParam("maxKeys", "1000")
	}

	// Send request and get response
	resp := &bce.BceResponse{}
	if err := cli.SendRequest(req, resp); err != nil {
		return nil, err
	}
	if resp.IsFail() {
		return nil, resp.ServiceError()
	}

	jsonBody := &ListSecurityGroupResult{}
	if err := resp.ParseJsonBody(jsonBody); err != nil {
		return nil, err
	}
	return jsonBody, nil
}

// AuthorizeSecurityGroupRule - authorize a rule of security group
//
// PARAMS:
//   - cli: the client agent which can perform sending request
//   - securityGroupId: id of the security group
//   - args: arguments to authorize security group rule
//
// RETURNS:
//   - error: nil if success otherwise the specific error
func AuthorizeSecurityGroupRule(cli bce.Client, securityGroupId string, args *AuthorizeSecurityGroupArgs) error {
	// Build the request
	req := &bce.BceRequest{}
	req.SetUri(getSecurityGroupUriWithId(securityGroupId))
	req.SetMethod(http.PUT)

	if args.ClientToken != "" {
		req.SetParam("clientToken", args.ClientToken)
	}
	req.SetParam("authorizeRule", "")

	jsonBytes, err := json.Marshal(args)
	if err != nil {
		return err
	}
	body, err := bce.NewBodyFromBytes(jsonBytes)
	if err != nil {
		return err
	}
	req.SetBody(body)

	// Send request and get response
	resp := &bce.BceResponse{}
	if err := cli.SendRequest(req, resp); err != nil {
		return err
	}
	if resp.IsFail() {
		return resp.ServiceError()
	}

	defer func() { resp.Body().Close() }()
	return nil
}

// RevokeSecurityGroupRule - revoke a rule of security group
//
// PARAMS:
//   - cli: the client agent which can perform sending request
//   - securityGroupId: id of the security group
//   - args: arguments to revoke security group rule
//
// RETURNS:
//   - error: nil if success otherwise the specific error
func RevokeSecurityGroupRule(cli bce.Client, securityGroupId string, args *RevokeSecurityGroupArgs) error {
	// Build the request
	req := &bce.BceRequest{}
	req.SetUri(getSecurityGroupUriWithId(securityGroupId))
	req.SetMethod(http.PUT)

	req.SetParam("revokeRule", "")

	jsonBytes, err := json.Marshal(args)
	if err != nil {
		return err
	}
	body, err := bce.NewBodyFromBytes(jsonBytes)
	if err != nil {
		return err
	}
	req.SetBody(body)

	// Send request and get response
	resp := &bce.BceResponse{}
	if err := cli.SendRequest(req, resp); err != nil {
		return err
	}
	if resp.IsFail() {
		return resp.ServiceError()
	}

	defer func() { resp.Body().Close() }()
	return nil
}

// DeleteSecurityGroup - delete a security group
//
// PARAMS:
//   - cli: the client agent which can perform sending request
//   - securityGroupId: id of the security group to be deleted
//
// RETURNS:
//   - error: nil if success otherwise the specific error
func DeleteSecurityGroup(cli bce.Client, securityGroupId string) error {
	// Build the request
	req := &bce.BceRequest{}
	req.SetUri(getSecurityGroupUriWithId(securityGroupId))
	req.SetMethod(http.DELETE)

	// Send request and get response
	resp := &bce.BceResponse{}
	if err := cli.SendRequest(req, resp); err != nil {
		return err
	}
	if resp.IsFail() {
		return resp.ServiceError()
	}

	defer func() { resp.Body().Close() }()
	return nil
}

// DeleteSecurityGroupRule - delete a security group rule
//
// PARAMS:
//   - securityGroupRuleId: the id of the specific security group rule
//
// RETURNS:
//   - error: nil if success otherwise the specific error
func DeleteSecurityGroupRule(cli bce.Client, args *DeleteSecurityGroupRuleArgs) error {
	builder := bce.NewRequestBuilder(cli).
		WithURL(getSecurityGroupRuleUri() + "/" + args.SecurityGroupRuleId).
		WithMethod(http.DELETE)
	if args.SgVersion != 0 {
		builder.WithQueryParamFilter("sgVersion", strconv.FormatInt(args.SgVersion, 10))
	}
	return builder.Do()
}

// UpdateSecurityGroupRule - update security group rule with the specific parameters
//
// PARAMS:
//   - args: the arguments to update the specific security group rule
//
// RETURNS:
//   - error: nil if success otherwise the specific error
func UpdateSecurityGroupRule(cli bce.Client, args *UpdateSecurityGroupRuleArgs) error {
	if args == nil {
		return fmt.Errorf("the UpdateSecurityGroupRuleArgs cannot be nil")
	}
	builder := bce.NewRequestBuilder(cli).
		WithURL(getSecurityGroupRuleUri() + "/update").
		WithMethod(http.PUT)
	if args.SgVersion != 0 {
		builder.WithQueryParamFilter("sgVersion", strconv.FormatInt(args.SgVersion, 10))
	}
	return builder.WithBody(args).Do()
}

// GetSecurityGroupDetail - get the detail of a security group
//
// PARAMS:
//   - cli: the client agent which can perform sending request
//   - securityGroupId: id of the specific security group
//
// RETURNS:
//   - *GetSecurityGroupDetailResult: the result of getting security group detail
func GetSecurityGroupDetail(cli bce.Client, securityGroupId string) (*GetSecurityGroupDetailResult, error) {
	// Build the request
	req := &bce.BceRequest{}
	req.SetUri(getSecurityGroupUriWithId(securityGroupId))
	req.SetMethod(http.GET)
	// Send request and get response
	resp := &bce.BceResponse{}
	if err := cli.SendRequest(req, resp); err != nil {
		return nil, err
	}
	if resp.IsFail() {
		return nil, resp.ServiceError()
	}
	jsonBody := &GetSecurityGroupDetailResult{}
	if err := resp.ParseJsonBody(jsonBody); err != nil {
		return nil, err
	}
	return jsonBody, nil
}