use kanidm_proto::constants::{ATTR_UID, LDAP_ATTR_CN, LDAP_CLASS_GROUPOFNAMES};
use kanidmd_lib::prelude::{Attribute, EntryClass};
use serde::Deserialize;
use std::collections::BTreeMap;
use url::Url;
use uuid::Uuid;

use ldap3_client::proto::LdapFilter;

fn person_objectclass() -> String {
    EntryClass::Person.to_string()
}

fn person_attr_user_name() -> String {
    ATTR_UID.to_string()
}

fn person_attr_display_name() -> String {
    LDAP_ATTR_CN.to_string()
}

fn person_attr_gidnumber() -> String {
    Attribute::UidNumber.to_string()
}

fn person_attr_password() -> String {
    Attribute::UserPassword.to_string()
}

fn person_attr_login_shell() -> String {
    Attribute::LoginShell.to_string()
}

fn person_attr_mail() -> String {
    Attribute::Mail.to_string()
}

fn person_attr_ssh_public_key() -> String {
    Attribute::LdapSshPublicKey.to_string()
}

fn group_objectclass() -> String {
    LDAP_CLASS_GROUPOFNAMES.to_string()
}

fn group_attr_name() -> String {
    Attribute::Cn.to_string()
}

fn group_attr_description() -> String {
    Attribute::Description.to_string()
}

fn group_attr_member() -> String {
    Attribute::Member.to_string()
}

fn group_attr_gidnumber() -> String {
    Attribute::GidNumber.to_string()
}

#[derive(Debug, Deserialize, Default)]
#[serde(rename_all = "lowercase")]
pub enum GroupAttrSchema {
    Rfc2307,
    #[default]
    Rfc2307Bis,
}

#[derive(Debug, Deserialize)]
pub struct Config {
    pub sync_token: String,
    pub schedule: Option<String>,
    pub status_bind: Option<String>,
    pub ldap_uri: Url,
    #[serde(default)]
    pub ldap_verify_ca: Option<bool>,
    pub ldap_ca: Option<String>,
    pub ldap_sync_dn: String,
    pub ldap_sync_pw: String,
    pub ldap_sync_base_dn: String,

    #[serde(deserialize_with = "ldap3_proto::filter::deserialise_ldap_filter")]
    pub ldap_filter: LdapFilter,

    pub sync_password_as_unix_password: Option<bool>,

    #[serde(default = "person_objectclass")]
    pub person_objectclass: String,
    #[serde(default = "person_attr_user_name")]
    pub person_attr_user_name: String,
    #[serde(default = "person_attr_display_name")]
    pub person_attr_display_name: String,
    #[serde(default = "person_attr_gidnumber")]
    pub person_attr_gidnumber: String,
    #[serde(default = "person_attr_password")]
    pub person_attr_password: String,
    pub person_password_prefix: Option<String>,
    #[serde(default = "person_attr_login_shell")]
    pub person_attr_login_shell: String,
    #[serde(default = "person_attr_mail")]
    pub person_attr_mail: String,
    #[serde(default = "person_attr_ssh_public_key")]
    pub person_attr_ssh_public_key: String,

    #[serde(default = "group_objectclass")]
    pub group_objectclass: String,
    #[serde(default = "group_attr_name")]
    pub group_attr_name: String,
    #[serde(default = "group_attr_description")]
    pub group_attr_description: String,
    #[serde(default = "group_attr_gidnumber")]
    pub group_attr_gidnumber: String,
    #[serde(default = "group_attr_member")]
    pub group_attr_member: String,
    #[serde(default)]
    pub group_attr_schema: GroupAttrSchema,

    /// Maximum LDAP message size (in kilobytes)
    pub max_ber_size: Option<usize>,

    #[serde(flatten)]
    pub entry_map: BTreeMap<Uuid, EntryConfig>,
}

#[derive(Debug, Deserialize, Default, Clone)]
pub struct EntryConfig {
    // Default false
    #[serde(default)]
    pub exclude: bool,

    pub map_uuid: Option<Uuid>,
    pub map_name: Option<String>,
    pub map_gidnumber: Option<u32>,
}
