cloudflare_api

defmodule CloudflareApi.AccessServiceTokens do
  @moduledoc ~S"""
  Manage Access service tokens for an account.
  """

  use CloudflareApi.Typespecs

  @doc ~S"""
  List access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.list(client, "account_id", [])
      {:ok, [%{"id" => "example"}]}

  """

  def list(client, account_id, opts \\ []) do
    c(client)
    |> Tesla.get(list_url(account_id, opts))
    |> handle_response()
  end

  @doc ~S"""
  Create access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.create(client, "account_id", %{})
      {:ok, %{"id" => "example"}}

  """

  def create(client, account_id, params) when is_map(params) do
    c(client)
    |> Tesla.post(base_path(account_id), params)
    |> handle_response()
  end

  @doc ~S"""
  Get access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.get(client, "account_id", "token_id")
      {:ok, %{"id" => "example"}}

  """

  def get(client, account_id, token_id) do
    c(client)
    |> Tesla.get(token_path(account_id, token_id))
    |> handle_response()
  end

  @doc ~S"""
  Update access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.update(client, "account_id", "token_id", %{})
      {:ok, %{"id" => "example"}}

  """

  def update(client, account_id, token_id, params) when is_map(params) do
    c(client)
    |> Tesla.put(token_path(account_id, token_id), params)
    |> handle_response()
  end

  @doc ~S"""
  Delete access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.delete(client, "account_id", "token_id")
      {:ok, %{"id" => "example"}}

  """

  def delete(client, account_id, token_id) do
    c(client)
    |> Tesla.delete(token_path(account_id, token_id), body: %{})
    |> handle_response()
  end

  @doc ~S"""
  Refresh access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.refresh(client, "account_id", "token_id")
      {:ok, %{"id" => "example"}}

  """

  def refresh(client, account_id, token_id) do
    c(client)
    |> Tesla.post(token_path(account_id, token_id) <> "/refresh", %{})
    |> handle_response()
  end

  @doc ~S"""
  Rotate access service tokens.

  Calls the Cloudflare API endpoint described in the moduledoc and
  returns `{:ok, result}` on success or `{:error, reason}` when the request fails.

  ## Examples

      iex> client = CloudflareApi.client("api-token")
      iex> CloudflareApi.AccessServiceTokens.rotate(client, "account_id", "token_id")
      {:ok, %{"id" => "example"}}

  """

  def rotate(client, account_id, token_id) do
    c(client)
    |> Tesla.post(token_path(account_id, token_id) <> "/rotate", %{})
    |> handle_response()
  end

  defp list_url(account_id, []), do: base_path(account_id)

  defp list_url(account_id, opts) do
    base_path(account_id) <> "?" <> CloudflareApi.uri_encode_opts(opts)
  end

  defp base_path(account_id), do: "/accounts/#{account_id}/access/service_tokens"
  defp token_path(account_id, token_id), do: base_path(account_id) <> "/#{token_id}"

  defp handle_response({:ok, %Tesla.Env{status: status, body: %{"result" => result}}})
       when status in 200..299,
       do: {:ok, result}

  defp handle_response({:ok, %Tesla.Env{status: status, body: body}}) when status in 200..299,
    do: {:ok, body}

  defp handle_response({:ok, %Tesla.Env{body: %{"errors" => errors}}}), do: {:error, errors}
  defp handle_response(other), do: {:error, other}

  defp c(%Tesla.Client{} = client), do: client
  defp c(fun) when is_function(fun, 0), do: fun.()
end