#
#   Copyright © 2021,2022 IsardVDI S.L.
#
#   This file is part of DD
#
#   DD is free software: you can redistribute it and/or modify
#   it under the terms of the GNU Affero General Public License as published by
#   the Free Software Foundation, either version 3 of the License, or (at your
#   option) any later version.
#
#   DD is distributed in the hope that it will be useful, but WITHOUT ANY
#   WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
#   FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
#   details.
#
#   You should have received a copy of the GNU Affero General Public License
#   along with DD. If not, see <https://www.gnu.org/licenses/>.
#
# SPDX-License-Identifier: AGPL-3.0-or-later
import json
import logging as log
import os
import time
import traceback
from datetime import datetime, timedelta
from pprint import pprint

import yaml
from jinja2 import Environment, FileSystemLoader
from keycloak import KeycloakAdmin
from postgres import Postgres


class KeycloakClient():
    """https://www.keycloak.org/docs-api/13.0/rest-api/index.html
        https://github.com/marcospereirampj/python-keycloak
        https://gist.github.com/kaqfa/99829941121188d7cef8271f93f52f1f
    """
    def __init__(self,
                url="http://dd-sso-keycloak:8080/auth/",
                username=os.environ['KEYCLOAK_USER'],
                password=os.environ['KEYCLOAK_PASSWORD'],
                realm='master',
                verify=True):
        self.url=url
        self.username=username
        self.password=password
        self.realm=realm
        self.verify=verify

        self.keycloak_pg=Postgres('dd-apps-postgresql','keycloak',os.environ['KEYCLOAK_DB_USER'],os.environ['KEYCLOAK_DB_PASSWORD'])

    def connect(self):
        self.keycloak_admin = KeycloakAdmin(server_url=self.url,
                                    username=self.username,
                                    password=self.password,
                                    realm_name=self.realm,
                                    verify=self.verify)


    def run(self):
        self.get_users()

    def get_users(self):
        self.connect()
        users=self.get_users_with_groups_and_roles()
        for u in users:
            if u['username']=='proves-meves': pprint(u)
            print('Updating keycloak temporary for user '+u['username'])
            self.update_user_pwd_temporary(u['id'])

    def update_user_pwd_temporary(self,user_id,temporary=False):
        payload={"credentials":[{"temporary":temporary}],
                  "requiredActions": []}
        self.connect()
        self.keycloak_admin.update_user( user_id, payload)

    def get_users_with_groups_and_roles(self):
        q = """select u.id, u.username, u.email, u.first_name, u.last_name, u.realm_id, ua.value as quota
        ,json_agg(g."name") as group, json_agg(g_parent."name") as group_parent1, json_agg(g_parent2."name") as group_parent2
        ,json_agg(r.name) as role
        from user_entity as u
        left join user_attribute as ua on ua.user_id=u.id and ua.name = 'quota'
        left join user_group_membership as ugm on ugm.user_id = u.id
        left join keycloak_group as g on g.id = ugm.group_id
        left join keycloak_group as g_parent on g.parent_group = g_parent.id
        left join keycloak_group as g_parent2 on g_parent.parent_group = g_parent2.id 
        left join user_role_mapping as rm on rm.user_id = u.id
        left join keycloak_role as r on r.id = rm.role_id
        group by u.id,u.username,u.email,u.first_name,u.last_name, u.realm_id, ua.value
        order by u.username"""

        # q = """select u.id, u.username, u.email, u.first_name, u.last_name, u.realm_id, ua.value as quota, g.id, g.path, g.name, 
        #     --,json_agg(g."name") as group, json_agg(g_parent."name") as group_parent1, json_agg(g_parent2."name") as group_parent2
        #     --,json_agg(r.name) as role
        #     from user_entity as u
        #     left join user_attribute as ua on ua.user_id=u.id and ua.name = 'quota'
        #     left join user_group_membership as ugm on ugm.user_id = u.id
        #     left join keycloak_group as g on g.id = ugm.group_id
        #     --left join keycloak_group as g_parent on g.parent_group = g_parent.id
        #     --left join keycloak_group as g_parent2 on g_parent.parent_group = g_parent2.id 
        #     left join user_role_mapping as rm on rm.user_id = u.id
        #     left join keycloak_role as r on r.id = rm.role_id
        #     --group by u.id,u.username,u.email,u.first_name,u.last_name, u.realm_id, ua.value
        #     order by u.username"""

        # q = """select u.id, u.username, u.email, u.first_name, u.last_name, u.realm_id, ua.value as quota
        #     ,json_agg(g."name") as group_name,json_agg(g."id") as group_id,json_agg(g."path") as group_path
        #     ,json_agg(g_parent."name") as group_parent1, json_agg(g_parent2."name") as group_parent2
        #     ,json_agg(r.name) as role
        #     from user_entity as u
        #     left join user_attribute as ua on ua.user_id=u.id and ua.name = 'quota'
        #     left join user_group_membership as ugm on ugm.user_id = u.id
        #     left join keycloak_group as g on g.id = ugm.group_id
        #     left join keycloak_group as g_parent on g.parent_group = g_parent.id
        #     left join keycloak_group as g_parent2 on g_parent.parent_group = g_parent2.id 
        #     left join user_role_mapping as rm on rm.user_id = u.id
        #     left join keycloak_role as r on r.id = rm.role_id
        #     group by u.id,u.username,u.email,u.first_name,u.last_name, u.realm_id, ua.value
        #     order by u.username"""
        (headers,users)=self.keycloak_pg.select_with_headers(q)

        users_with_lists = [list(l[:-4])+([[]] if l[-4] == [None] else [list(set(l[-4]))]) +\
                                        ([[]] if l[-3] == [None] else [list(set(l[-3]))]) +\
                                        ([[]] if l[-3] == [None] else [list(set(l[-2]))]) +\
                                        ([[]] if l[-1] == [None] else [list(set(l[-1]))]) for l in users]
                                        
        users_with_lists = [list(l[:-4])+([[]] if l[-4] == [None] else [list(set(l[-4]))]) +\
                                        ([[]] if l[-3] == [None] else [list(set(l[-3]))]) +\
                                        ([[]] if l[-3] == [None] else [list(set(l[-2]))]) +\
                                        ([[]] if l[-1] == [None] else [list(set(l[-1]))]) for l in users_with_lists]

        list_dict_users = [dict(zip(headers, r)) for r in users_with_lists]
        return list_dict_users

k=KeycloakClient()
k.run()
