module Twilio
  module JWT
    class AccessToken
      attr_accessor :account_sid,
                    :signing_key_id,
                    :secret,
                    :ttl,
                    :identity,
                    :nbf

      def initialize(account_sid, key_sid, secret, ttl=3600, identity=nil, nbf=nil)
        @account_sid = account_sid
        @key_sid = key_sid
        @secret = secret
        @ttl = ttl
        @identity = identity
        @nbf = nbf
        @grants = []
      end

      def add_grant(grant)
        @grants.push(grant)
      end

      def to_jwt(algorithm='HS256')
        now = Time.now.to_i - 1
        headers = {
            cty: 'twilio-fpa;v=1'
        }

        grants = {}
        if @identity
          grants[:identity] = @identity
        end

        @grants.each { |grant| grants[grant.key] = grant.payload }

        payload = {
            jti: "#{@key_sid}-#{now}",
            iss: @key_sid,
            sub: @account_sid,
            exp: now + @ttl,
            grants: grants
        }

        payload[:nbf] = @nbf unless @nbf.nil?

        ::JWT.encode payload, @secret, algorithm, headers
      end

      def to_s
        to_jwt
      end

      class IpMessagingGrant
        attr_accessor :service_sid,
                      :endpoint_id,
                      :deployment_role_sid,
                      :push_credential_sid

        def key
          'ip_messaging'
        end

        def payload
          payload = {}

          if service_sid
            payload[:service_sid] = service_sid
          end

          if endpoint_id
            payload[:endpoint_id] = endpoint_id
          end

          if deployment_role_sid
            payload[:deployment_role_sid] = deployment_role_sid
          end

          if push_credential_sid
            payload[:push_credential_sid] = push_credential_sid
          end

          payload
        end

      end

      class VoiceGrant
        attr_accessor :outgoing_application_sid,
                      :outgoing_application_params,
                      :push_credential_sid,
                      :endpoint_id

        def key
          'voice'
        end

        def payload
          payload = {}

          if outgoing_application_sid
            outgoing = {}
            outgoing[:application_sid] = outgoing_application_sid
            if outgoing_application_params
              outgoing[:params] = outgoing_application_params
            end

            payload[:outgoing] = outgoing
          end

          if push_credential_sid
            payload[:push_credential_sid] = push_credential_sid
          end

          if endpoint_id
            payload[:endpoint_id] = endpoint_id
          end

          payload
        end
      end

      class SyncGrant
        attr_accessor :service_sid,
                      :endpoint_id

        def key
          'data_sync'

        end

        def payload
          payload = {}

          if service_sid
            payload['service_sid'] = service_sid
          end
          if endpoint_id
            payload['endpoint_id'] = endpoint_id
          end

          payload
        end
      end

      class VideoGrant
        attr_accessor :room

        def key
          'video'
        end

        def payload
          payload = {}

          if room
            payload[:room] = room
          end

          payload
        end
      end


    end
  end
end