class Miam::Exporter
  def self.export(iam, options = {}, &block)
    self.new(iam, options).export(&block)
  end

  def initialize(iam, options = {})
    @iam = iam
    @options = options
  end

  def export(&block)
    users = list_users
    groups = list_groups
    group_users = {}

    export_options = {
      :progress_total => (users.length + groups.length),
      :progress => 0,
    }

    expected = {
      :users => export_users(users, group_users, export_options, &block),
      :groups => export_groups(groups, export_options, &block),
    }

    [expected, group_users]
  end

  private

  def export_users(users, group_users, export_options = {})
    result = {}

    users.each do |user|
      user_name = user.user_name

      groups = export_user_groups(user_name)

      groups.each do |group_name|
        group_users[group_name] ||= []
        group_users[group_name] << user_name
      end

      result[user_name] = {
        :path => user.path,
        :groups => groups,
        :policies => export_user_policies(user_name),
      }

      login_profile = export_login_profile(user_name)

      if login_profile
        result[user_name][:login_profile] = login_profile
      end

      export_options[:progress] += 1
      yield(export_options) if block_given?
    end

    result
  end

  def export_user_groups(user_name)
    @iam.list_groups_for_user(:user_name => user_name).map {|resp|
      resp.groups.map do |group|
        group.group_name
      end
    }.flatten
  end

  def export_user_policies(user_name)
    result = {}

    @iam.list_user_policies(:user_name => user_name).each do |resp|
      resp.policy_names.map do |policy_name|
        policy = @iam.get_user_policy(:user_name => user_name, :policy_name => policy_name)
        document = CGI.unescape(policy.policy_document)
        result[policy_name] = JSON.parse(document)
      end
    end

    result
  end

  def export_login_profile(user_name)
    begin
      resp = @iam.get_login_profile(:user_name => user_name)
      {:password_reset_required => resp.login_profile.password_reset_required}
    rescue Aws::IAM::Errors::NoSuchEntity
      nil
    end
  end

  def export_groups(groups, export_options = {})
    result = {}

    groups.each do |group|
      group_name = group.group_name

      result[group_name] = {
        :path => group.path,
        :policies => export_group_policies(group_name),
      }

      export_options[:progress] += 1
      yield(export_options) if block_given?
    end

    result
  end

  def export_group_policies(group_name)
    result = {}

    @iam.list_group_policies(:group_name => group_name).each do |resp|
      resp.policy_names.map do |policy_name|
        policy = @iam.get_group_policy(:group_name => group_name, :policy_name => policy_name)
        document = CGI.unescape(policy.policy_document)
        result[policy_name] = JSON.parse(document)
      end
    end

    result
  end

  def list_users
    @iam.list_users.map {|resp|
      resp.users.to_a
    }.flatten
  end

  def list_groups
    @iam.list_groups.map {|resp|
      resp.groups.to_a
    }.flatten
  end
end