use crate::opt::ssh_authorisedkeys::SshAuthorisedKeysOpt;
use crate::SparkleFlavour;
use clap::Parser;
use sparkle_unix_common::client::DaemonClient;
use sparkle_unix_common::constants::DEFAULT_CONFIG_PATH;
use sparkle_unix_common::unix_config::PamNssConfig;
use sparkle_unix_common::unix_proto::{ClientRequest, ClientResponse};
use std::path::PathBuf;
use std::process::ExitCode;

pub async fn main<F: SparkleFlavour>(_flavour: F) -> ExitCode {
    let opt = SshAuthorisedKeysOpt::parse();
    if opt.debug {
        ::std::env::set_var("RUST_LOG", "kanidm=debug,kanidm_client=debug");
    }
    if opt.version {
        println!("ssh_authorizedkeys {}", env!("KANIDM_PKG_VERSION"));
        return ExitCode::SUCCESS;
    }

    sketching::tracing_subscriber::fmt::init();

    if opt.account_id.is_none() {
        error!("No account specified, quitting!");
        return ExitCode::FAILURE;
    }

    debug!("Starting authorized keys tool ...");

    let cfg = match PamNssConfig::new().read_options_from_optional_config(DEFAULT_CONFIG_PATH) {
        Ok(c) => c,
        Err(e) => {
            error!("Failed to parse {}: {:?}", DEFAULT_CONFIG_PATH, e);
            return ExitCode::FAILURE;
        }
    };

    debug!(
        "Using kanidm_unixd socket path: {:?}",
        cfg.sock_path.as_str()
    );

    // see if the kanidm_unixd socket exists and quit if not
    if !PathBuf::from(&cfg.sock_path).exists() {
        error!(
            "Failed to find unix socket at {}, quitting!",
            cfg.sock_path.as_str()
        );
        return ExitCode::FAILURE;
    }

    let mut daemon_client =
        match DaemonClient::new(cfg.sock_path.as_str(), cfg.unix_sock_timeout).await {
            Ok(dc) => dc,
            Err(err) => {
                error!(
                    "Failed to connect to resolver at {}-> {:?}",
                    cfg.sock_path.as_str(),
                    err
                );
                return ExitCode::FAILURE;
            }
        };

    // safe because we've already thrown an error if it's not there
    let req = ClientRequest::SshKey(opt.account_id.unwrap_or("".to_string()));

    match daemon_client.call(req, None).await {
        Ok(ClientResponse::SshKeys(sk)) => {
            sk.iter().for_each(|k| {
                println!("{k}");
            });
            ExitCode::SUCCESS
        }
        Ok(r) => {
            error!("Error calling kanidm_unixd: unexpected response -> {:?}", r);
            ExitCode::FAILURE
        }
        Err(e) => {
            error!("Error calling kanidm_unixd -> {:?}", e);
            ExitCode::FAILURE
        }
    }
}
