import {z} from 'zod'

export type ManageLoketAccess = {action?: ('RevokeAccess' | 'ReinstateAccess' | 'RevokeAccessLoketClassicOnly' | 'ReinstateAccessLoketClassicOnly') | undefined};

export type PatchApiV2ProvidersUsersUserIdAccessArgs = {userId: string, Authorization: string, Accept: string, body: ManageLoketAccess};

export type PatchApiV2ProvidersUsersUserIdAccessOptions = {baseUrl?: string | undefined, fetch?: typeof fetch | undefined};

export const version = z.object({obsoleteDate: z.string().nullable().optional(), resourceVersion: z.string().optional()});

export const messageWarning = z.array(z.object({type: z.string().optional(), description: z.string().optional(), id: z.string().nullable().optional(), code: z.number().int().optional(), properties: z.array(z.string()).optional()}));

export const id = z.string();

export const loginMethod = z.object({key: z.number().int().optional(), value: z.string().max(50).optional()});

export const firstName2 = z.string().min(1).max(28).nullable();

export const initials3 = z.string().min(1).max(6);

export const prefix2 = z.string().min(1).max(10).nullable();

export const lastName2 = z.string().min(1).max(25);

export const contactInformation4 = z.object({placeOfEmployment: z.string().min(1).max(24).nullable().optional(), phoneNumber: z.string().min(1).max(15).nullable().optional(), emailAddress: z.string().max(255).optional()});

export const userSpecifiedRole = z.object({key: z.number().int().optional(), value: z.string().max(50).optional()}).nullable();

export const userCustomSpecifiedRole = z.string().max(50).nullable();

export const accessStatus = z.object({key: z.number().int().optional(), value: z.string().max(255).optional()});

export const hasMultiFactorAuthentication = z.boolean();

export const twoFactorAuthenticationRequired = z.boolean();

export const azureActiveDirectory = z.object({tenant: z.object({id: z.string().optional(), description: z.string().max(100).optional(), tenantRegistrationLevel: z.enum(["provider", "provider"]).optional()}).optional(), userId: z.string().optional()}).nullable();

export const userNameReadOnly = z.string().min(3).max(50).nullable();

export const hasIntegrations = z.boolean();

export const hasConnectedApplications = z.boolean();

export const hasAuthorisationsOnUserLevel = z.boolean();

export const dateTimeLastLogin = z.string().nullable();

export const dateTimeCreation = z.string();

export const authorizationSet = z.object({key: z.number().int().optional(), value: z.string().max(50).optional()}).nullable();

export const userGetAndPut = z.object({id: id.optional(), loginMethod: loginMethod.optional(), personalDetails: z.object({firstName: firstName2.optional(), initials: initials3.optional(), prefix: prefix2.optional(), lastName: lastName2.optional()}).optional(), contactInformation: contactInformation4.optional(), userSpecifiedRole: userSpecifiedRole.optional(), userCustomSpecifiedRole: userCustomSpecifiedRole.optional(), accessStatus: accessStatus.optional(), hasMultiFactorAuthentication: hasMultiFactorAuthentication.optional(), twoFactorAuthenticationRequired: twoFactorAuthenticationRequired.optional(), azureActiveDirectory: azureActiveDirectory.optional(), userName: userNameReadOnly.optional(), hasIntegrations: hasIntegrations.optional(), hasConnectedApplications: hasConnectedApplications.optional(), hasAuthorisationsOnUserLevel: hasAuthorisationsOnUserLevel.optional(), dateTimeLastLogin: dateTimeLastLogin.optional(), dateTimeCreation: dateTimeCreation.optional(), authorizationSet: authorizationSet.optional()});

export const patchApiV2ProvidersUsersUserIdAccessResponse = z.object({version: version.optional(), messages: messageWarning.optional(), content: userGetAndPut.optional()});

export const validateResponse = async <Output>(
  schema: {
    readonly '~standard': {
      readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray<PropertyKey | { readonly key: PropertyKey }> | undefined }> }>
    }
  },
  value: unknown
): Promise<Output> => {
  const result = await schema['~standard'].validate(value)

  if (result.issues !== undefined) {
    const detail = result.issues
      .map(({ message, path }) =>
        path?.length
          ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}`
          : message
      )
      .join('; ')

    throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } })
  }

  return result.value
};

/**
 * Reinstate or Revoke access to Loket for a provider user (clients)
 * 
 * PATCH /v2/providers/users/{userId}/access
 */
export const patchApiV2ProvidersUsersUserIdAccess = async (args: PatchApiV2ProvidersUsersUserIdAccessArgs, options?: PatchApiV2ProvidersUsersUserIdAccessOptions) => {
const {baseUrl = "https://api.loket.nl", fetch: fetchFn = fetch} = options ?? {}

const query = new URLSearchParams()
const headers = new Headers()
headers.set('content-type', "application/json;version=2018-01-01")
headers.set('accept', "application/json;version=2018-01-01")

if (args.Authorization != null) headers.set("Authorization", String(args.Authorization))
if (args.Accept != null) headers.set("Accept", String(args.Accept))

const url = `${baseUrl.replace(/\/+$/, '')}/v2/providers/users/${encodeURIComponent(String(args.userId))}/access${query.size > 0 ? `?${query}` : ''}`

const res = await fetchFn(url, {method: "PATCH", headers, body: JSON.stringify(args.body)})

if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}})

return validateResponse(patchApiV2ProvidersUsersUserIdAccessResponse, await res.json())
};