/* foundry-cli-builtin-secret-rotate.c
 *
 * Copyright 2025 Christian Hergert <chergert@redhat.com>
 *
 * This library is free software; you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as
 * published by the Free Software Foundation; either version 2.1 of the
 * License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along
 * with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * SPDX-License-Identifier: LGPL-2.1-or-later
 */

#include "config.h"

#include <stdio.h>

#include <glib/gi18n-lib.h>

#include "foundry-cli-builtin-private.h"
#include "foundry-context.h"
#include "foundry-secret-service.h"
#include "foundry-service.h"
#include "foundry-util-private.h"

static int
foundry_cli_builtin_secret_rotate_run (FoundryCommandLine *command_line,
                                       const char * const *argv,
                                       FoundryCliOptions  *options,
                                       DexCancellable     *cancellable)
{
  g_autoptr(FoundrySecretService) secret_service = NULL;
  g_autoptr(FoundryContext) foundry = NULL;
  g_autoptr(GError) error = NULL;
  g_autoptr(GDateTime) expire_at = NULL;
  g_autofree char *api_key = NULL;
  const char *hostname;
  const char *service;
  const char *expire_at_str;
  gint year;
  gint month;
  gint day;

  g_assert (FOUNDRY_IS_COMMAND_LINE (command_line));
  g_assert (argv != NULL);
  g_assert (argv[0] != NULL);
  g_assert (!cancellable || DEX_IS_CANCELLABLE (cancellable));

  if (argv[1] == NULL || argv[2] == NULL)
    {
      foundry_command_line_printerr (command_line, "usage: foundry secret rotate HOSTNAME SERVICE\n");
      return EXIT_FAILURE;
    }

  hostname = argv[1];
  service = argv[2];

  if (argv[3] != NULL)
    {
      foundry_command_line_printerr (command_line, "usage: foundry secret rotate [OPTIONS] HOSTNAME SERVICE\n");
      return EXIT_FAILURE;
    }

  if (foundry_str_empty0 (hostname))
    {
      foundry_command_line_printerr (command_line, "hostname cannot be empty\n");
      return EXIT_FAILURE;
    }

  if (foundry_str_empty0 (service))
    {
      foundry_command_line_printerr (command_line, "service cannot be empty\n");
      return EXIT_FAILURE;
    }

  expire_at_str = foundry_cli_options_get_string (options, "expire-at");
  if (expire_at_str != NULL)
    {
      if (sscanf (expire_at_str, "%d-%d-%d", &year, &month, &day) != 3)
        {
          foundry_command_line_printerr (command_line, "Invalid date format. Expected YYYY-MM-DD\n");
          return EXIT_FAILURE;
        }

      expire_at = g_date_time_new_utc (year, month, day, 0, 0, 0);
      if (expire_at == NULL)
        {
          foundry_command_line_printerr (command_line, "Invalid date: %s\n", expire_at_str);
          return EXIT_FAILURE;
        }
    }

  if (!(foundry = dex_await_object (foundry_cli_options_load_context (options, command_line), &error)))
    goto handle_error;

  if (!(secret_service = foundry_context_dup_secret_service (foundry)))
    {
      foundry_command_line_printerr (command_line, "Failed to get secret service\n");
      return EXIT_FAILURE;
    }

  if (!dex_await (foundry_service_when_ready (FOUNDRY_SERVICE (secret_service)), &error))
    goto handle_error;

  if (!(api_key = dex_await_string (foundry_secret_service_lookup_api_key (secret_service, hostname, service), &error)))
    goto handle_error;

  if (api_key == NULL)
    {
      foundry_command_line_printerr (command_line, "No API key found for %s on %s\n", service, hostname);
      return EXIT_FAILURE;
    }

  if (!dex_await (foundry_secret_service_rotate_api_key (secret_service, hostname, service, expire_at), &error))
    goto handle_error;

  foundry_command_line_print (command_line, "API key rotated successfully for %s on %s\n", service, hostname);

  return EXIT_SUCCESS;

handle_error:

  foundry_command_line_printerr (command_line, "%s\n", error->message);
  return EXIT_FAILURE;
}

void
foundry_cli_builtin_secret_rotate (FoundryCliCommandTree *tree)
{
  foundry_cli_command_tree_register (tree,
                                     FOUNDRY_STRV_INIT ("foundry", "secret", "rotate"),
                                     &(FoundryCliCommand) {
                                       .options = (GOptionEntry[]) {
                                         { "expire-at", 0, 0, G_OPTION_ARG_STRING, NULL, N_("Set expiration date in YYYY-MM-DD format"), N_("DATE") },
                                         { "help", 0, 0, G_OPTION_ARG_NONE },
                                         {0}
                                       },
                                       .run = foundry_cli_builtin_secret_rotate_run,
                                       .prepare = NULL,
                                       .complete = NULL,
                                       .gettext_package = GETTEXT_PACKAGE,
                                       .description = N_("[OPTIONS] HOSTNAME SERVICE - Rotate API key for service"),
                                     });
}
