module Api::V2
  module Compliance
    class OvalPoliciesController < ::Api::V2::BaseController
      include Foreman::Controller::SmartProxyAuth
      include ForemanOpenscap::Api::V2::ScapApiControllerExtensions
      include Foreman::Controller::Parameters::OvalPolicy

      add_smart_proxy_filters %i[oval_content], :features => 'Openscap'

      before_action :find_resource, :except => %w[index create]
      skip_after_action :log_response_body, :only => %i[oval_content]

      api :GET, '/compliance/oval_policies', N_('List OVAL Policies')
      param_group :search_and_pagination, ::Api::V2::BaseController

      def index
        @oval_policies = resource_scope_for_index(:permission => :view_oval_policies)
      end

      api :GET, '/compliance/oval_policies/:id', N_('Show an OVAL Policy')
      param :id, :identifier, :required => true

      def show
      end

      def_param_group :oval_policy do
        param :oval_policy, Hash, :required => true, :action_aware => true do
          param :name, String, :required => true, :desc => N_('OVAL Policy name')
          param :oval_content_id, Integer, :required => true, :desc => N_('Policy OVAL content ID')
          param :description, String, :desc => N_('OVAL Policy description')
          param :period, String, :desc => N_('OVAL Policy schedule period (weekly, monthly, custom)')
          param :weekday, String, :desc => N_('OVAL Policy schedule weekday (only if period == "weekly")')
          param :day_of_month, Integer, :desc => N_('OVAL Policy schedule day of month (only if period == "monthly")')
          param :cron_line, String, :desc => N_('OVAL Policy schedule cron line (only if period == "custom")')
          param_group :taxonomies, ::Api::V2::BaseController
        end
      end

      api :POST, '/compliance/oval_policies', N_('Create an OVAL Policy')
      param_group :oval_policy, :as => :create

      def create
        @oval_policy = ForemanOpenscap::OvalPolicy.new(oval_policy_params)
        process_response(@oval_policy.save)
      end

      api :PUT, '/compliance/oval_policies/:id', N_('Update an OVAL Policy')
      param :id, :identifier, :required => true
      param_group :oval_policy

      def update
        process_response(@oval_policy.update(oval_policy_params))
      end

      api :DELETE, '/compliance/oval_policies/:id', N_('Delete an OVAL Policy')
      param :id, :identifier, :required => true

      def destroy
        process_response @oval_policy.destroy
      end

      api :POST, '/compliance/oval_policies/:id/assign_hostgroups', N_('Assign hostgroups to an OVAL Policy')
      param :id, :identifier, :required => true
      param :hostgroup_ids, Array, :desc => N_('Array of hostgroup IDs')

      def assign_hostgroups
        assign _('hostgroups'), params["hostgroup_ids"], ::Hostgroup
      end

      api :POST, '/compliance/oval_policies/:id/assign_hosts', N_('Assign hosts to an OVAL Policy')
      param :id, :identifier, :required => true
      param :host_ids, Array, :desc => N_('Array of host IDs')

      def assign_hosts
        assign _('hosts'), params["host_ids"], ::Host::Managed
      end

      api :GET, '/compliance/oval_policies/:id/oval_content', N_("Show a policy's SCAP content")
      param :id, :identifier, :required => true

      def oval_content
        @oval_content = @oval_policy.oval_content
        send_data @oval_content.scap_file,
                  :type => 'application/x-bzip2',
                  :filename => @oval_content.original_filename
      end

      def action_permission
        case params[:action]
        when 'assign_hostgroups', 'assign_hosts'
          :edit
        when 'oval_content'
          :show
        else
          super
        end
      end

      private

      def assign(resource_plural, ids, model_class)
        check_collection = ::ForemanOpenscap::Oval::Configure.new.assign(@oval_policy, ids, model_class)
        if check_collection.all_passed?
          render :json => { :message => (_("OVAL policy successfully configured with %s.") % resource_plural) }
        else
          render :json => { :results => check_collection.find_failed.map(&:to_h) }
        end
      end
    end
  end
end