/*-
 * ============LICENSE_START=======================================================
 * policy-healthcheck
 * ================================================================================
 * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
 * ================================================================================
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * ============LICENSE_END=========================================================
 */

package org.openecomp.policy.drools.http.client.internal;

import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import javax.ws.rs.client.Client;
import javax.ws.rs.client.ClientBuilder;
import javax.ws.rs.core.Response;

import org.glassfish.jersey.client.authentication.HttpAuthenticationFeature;
import org.openecomp.policy.drools.http.client.HttpClient;

import com.fasterxml.jackson.annotation.JsonIgnore;

public class JerseyClient implements HttpClient {
	
	protected final String name;
	protected final boolean https;
	protected final boolean selfSignedCerts;
	protected final String hostname;
	protected final int port;
	protected final String basePath;
	protected final String userName;
	protected final String password;
	
	protected final Client client;
	protected final String baseUrl;
	
	protected boolean alive = true;
	
	
	public JerseyClient(String name, boolean https, 
			            boolean selfSignedCerts,
			            String hostname, int port, 
			            String basePath, String userName,
			            String password) 
	throws Exception {
		
		super();
		
		if (name == null || name.isEmpty())
			throw new IllegalArgumentException("Name must be provided");
		
		if (hostname == null || hostname.isEmpty())
			throw new IllegalArgumentException("Hostname must be provided");
		
		if (port <= 0 && port >= 65535)
			throw new IllegalArgumentException("Invalid Port provided: " + port);
		
		this.name = name;
		this.https = https;
		this.hostname = hostname;
		this.port = port;
		this.basePath = basePath;
		this.userName = userName;
		this.password = password;
		this.selfSignedCerts = selfSignedCerts;
		
		StringBuffer tmpBaseUrl = new StringBuffer();
		if (this.https) {
			tmpBaseUrl.append("https://");
			ClientBuilder clientBuilder;
			SSLContext sslContext = SSLContext.getInstance("TLSv1.2");
			if (this.selfSignedCerts) {
				sslContext.init(null, new TrustManager[]{new X509TrustManager() {
					@Override
			        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}
					@Override
			        public void checkServerTrusted(X509Certificate[]  chain, String authType) throws CertificateException {}
					@Override
			        public X509Certificate[] getAcceptedIssuers() { return new X509Certificate[0]; }
	
			    }}, new SecureRandom());
				 clientBuilder = ClientBuilder.newBuilder().sslContext(sslContext).hostnameVerifier(new HostnameVerifier() {
					@Override
					public boolean verify(String hostname, SSLSession session) {return true;}
				 });
			} else {
				sslContext.init(null, null, null);
				clientBuilder = ClientBuilder.newBuilder().sslContext(sslContext);
			}
			this.client = clientBuilder.build();
		} else {	
			tmpBaseUrl.append("http://");
			this.client = ClientBuilder.newClient();
		}
		
		if (this.userName != null && !this.userName.isEmpty() &&
			this.password != null && !this.password.isEmpty()) {
			HttpAuthenticationFeature authFeature = HttpAuthenticationFeature.basic(userName, password);
			this.client.register(authFeature);
		}
		
		this.baseUrl = tmpBaseUrl.append(this.hostname).append(":").
				                  append(this.port).append("/").
		                          append((this.basePath == null) ? "" : this.basePath).
		                          toString();
	}
	
	@Override
	public Response get(String path) {		
		if (path != null && !path.isEmpty())
			return this.client.target(this.baseUrl).path(path).request().get();
		else
			return this.client.target(this.baseUrl).request().get();
	}
	
	@Override
	public Response get() {
		return this.client.target(this.baseUrl).request().get();
	}
	

	@Override
	public boolean start() throws IllegalStateException {
		return alive;
	}

	@Override
	public boolean stop() throws IllegalStateException {
		return !alive;
	}

	@Override
	public void shutdown() throws IllegalStateException {
		synchronized(this) {
			alive = false;
		}
		
		try {
			this.client.close();
		} catch (Exception e) {
			e.printStackTrace();
		}
	}

	@Override
	public synchronized boolean isAlive() {
		return this.alive;
	}

	@Override
	public String getName() {
		return name;
	}

	@Override
	public boolean isHttps() {
		return https;
	}

	@Override
	public boolean isSelfSignedCerts() {
		return selfSignedCerts;
	}

	@Override
	public String getHostname() {
		return hostname;
	}

	public int getPort() {
		return port;
	}

	@Override
	public String getBasePath() {
		return basePath;
	}

	@Override
	public String getUserName() {
		return userName;
	}

	@JsonIgnore
	@Override
	public String getPassword() {
		return password;
	}

	@Override
	public String getBaseUrl() {
		return baseUrl;
	}

	@Override
	public String toString() {
		StringBuilder builder = new StringBuilder();
		builder.append("JerseyClient [name=");
		builder.append(name);
		builder.append(", https=");
		builder.append(https);
		builder.append(", selfSignedCerts=");
		builder.append(selfSignedCerts);
		builder.append(", hostname=");
		builder.append(hostname);
		builder.append(", port=");
		builder.append(port);
		builder.append(", basePath=");
		builder.append(basePath);
		builder.append(", userName=");
		builder.append(userName);
		builder.append(", password=");
		builder.append(password);
		builder.append(", client=");
		builder.append(client);
		builder.append(", baseUrl=");
		builder.append(baseUrl);
		builder.append(", alive=");
		builder.append(alive);
		builder.append("]");
		return builder.toString();
	}

}