package main

import (
	"context"
	"fmt"
	"log"
	"net/http"
	"time"

	setup "github.com/paloaltonetworks/scm-go-v2"
	"github.com/paloaltonetworks/scm-go-v2/common"
	"github.com/paloaltonetworks/scm-go-v2/generated/network_services"
)

func main() {
	configPath := common.GetConfigPath()
	setupClient := &setup.Client{
		AuthFile:         configPath,
		CheckEnvironment: false,
	}

	fmt.Printf("Using config file: %s\n", setupClient.AuthFile)

	// Setup the client configuration
	err := setupClient.Setup()

	// Refresh JWT token
	ctx := context.Background()
	if setupClient.Jwt == "" {
		maxRetries := 3
		retryDelay := 2 * time.Second
		for i := 0; i < maxRetries; i++ {
			err = setupClient.RefreshJwt(ctx)
			if err == nil {
				break // Success, exit the loop
			}
			time.Sleep(retryDelay)
		}
		// Fail the test only after all retries have been exhausted.
	}

	// Create the network_services API client
	config := network_services.NewConfiguration()
	config.Host = setupClient.GetHost()
	config.Scheme = "https"

	// Create a custom HTTP client that includes the JWT token and logging
	if setupClient.HttpClient == nil {
		setupClient.HttpClient = &http.Client{}
	}

	// Wrap the transport with our logging transport
	if setupClient.HttpClient.Transport == nil {
		setupClient.HttpClient.Transport = http.DefaultTransport
	}
	setupClient.HttpClient.Transport = &common.LoggingRoundTripper{
		Wrapped: setupClient.HttpClient.Transport,
	}

	config.HTTPClient = setupClient.HttpClient

	// Set up the default header with JWT
	config.DefaultHeader = make(map[string]string)
	config.DefaultHeader["Authorization"] = "Bearer " + setupClient.Jwt
	config.DefaultHeader["x-auth-jwt"] = setupClient.Jwt

	apiClient := network_services.NewAPIClient(config)

	// Create a profile to retrieve.
	profileName := "test-ike-get-" + common.GenerateRandomString(6)
	profile := network_services.IkeCryptoProfiles{
		Folder:     common.StringPtr("Shared"),
		Name:       profileName,
		Hash:       []string{"sha512"},
		DhGroup:    []string{"group20"},
		Encryption: []string{"aes-128-gcm"},
	}

	reqCreate := apiClient.IKECryptoProfilesAPI.CreateIKECryptoProfiles(context.Background()).IkeCryptoProfiles(profile)
	createRes, _, err := reqCreate.Execute()
	log.Print(*createRes.Id)
}