# frozen_string_literal: true

require 'fog/core/model'

module Fog
  module Compute
    class Aliyun
      class SecurityGroup < Fog::Model
        identity :id, aliases: 'SecurityGroupId'
        attribute :name, aliases: 'SecurityGroupName'
        attribute :description, aliases: 'Description'
        attribute :created_at, aliases: 'CreationTime'
        attribute :vpc_id, aliases: 'VpcId'

        def vpc
          requires :vpc_id
          service.vpcs.get(vpc_id)
        end

        def security_group_rules
          requires :id
          service.security_group_rules.get(id)
        end

        def save(options = {})
          options[:vpcId] = vpc_id if vpc_id
          options[:name] = name if name
          options[:description] = description if description
          Fog::JSON.decode(service.create_security_group(options).body)
          true
        end

        def destroy
          requires :id
          service.delete_security_group(id)
          true
        end

        def authorize_security_group_sg_rule(group_id, direction = 'ingress', options = {})
          requires :id
          if direction == 'egress'
            service.create_security_group_egress_sg_rule(id, group_id, options)
          else
            service.create_security_group_sg_rule(id, group_id, options)
          end
          true
        end

        def authorize_security_group_ip_rule(cidr_ip, direction = 'ingress', options = {})
          requires :id
          nic_type = options.fetch(:nic_type, 'internet')
          if direction == 'egress'
            service.create_security_group_egress_ip_rule(id, cidr_ip, nic_type, options)
          else
            service.create_security_group_ip_rule(id, cidr_ip, nic_type, options)
          end
          true
        end

        def revoke_seurity_group_sg_rule(group_id, direction = 'ingress', options = {})
          requires :id
          if direction == 'egress'
            service.delete_security_group_egress_sg_rule(id, group_id, options)
          else
            service.delete_security_group_sg_rule(id, group_id, options)
          end
          true
        end

        def revoke_security_group_ip_rule(cidr_ip, direction = 'ingress', options = {})
          requires :id
          nic_type = options.fetch(:nic_type, 'internet')
          if direction == 'egress'
            service.delete_security_group_egress_ip_rule(id, cidr_ip, nic_type, options)
          else
            service.delete_security_group_ip_rule(id, cidr_ip, nic_type, options)
          end
          true
        end
      end
    end
  end
end