import json

import boto3
import sure  # noqa
from mock import patch
from moto import mock_iam, mock_organizations, mock_sts

from prowler.providers.aws.lib.audit_info.models import AWS_Audit_Info
from prowler.providers.azure.azure_provider import Azure_Provider
from prowler.providers.azure.lib.audit_info.models import (
    Azure_Audit_Info,
    Azure_Identity_Info,
)
from prowler.providers.common.common import Audit_Info, set_provider_audit_info

ACCOUNT_ID = 123456789012
mock_current_audit_info = AWS_Audit_Info(
    original_session=None,
    audit_session=None,
    audited_account="123456789012",
    audited_identity_arn="arn:aws:iam::123456789012:user/test",
    audited_user_id="test",
    audited_partition="aws",
    profile="default",
    profile_region="eu-west-1",
    credentials=None,
    assumed_role_info=None,
    audited_regions=["eu-west-2", "eu-west-1"],
    organizations_metadata=None,
)

mock_azure_audit_info = Azure_Audit_Info(
    credentials=None, identity=Azure_Identity_Info()
)

mock_set_audit_info = Audit_Info()


def mock_validate_credentials(*_):
    caller_identity = {
        "Arn": "arn:aws:iam::123456789012:user/test",
        "Account": "123456789012",
        "UserId": "test",
    }
    return caller_identity


def mock_print_audit_credentials(*_):
    pass


def mock_set_identity_info(*_):
    return Azure_Identity_Info()


def mock_set_credentials(*_):
    return {}


class Test_Set_Audit_Info:
    @patch(
        "prowler.providers.common.common.current_audit_info",
        new=mock_current_audit_info,
    )
    @mock_sts
    @mock_iam
    def test_validate_credentials(self):
        # Create a mock IAM user
        iam_client = boto3.client("iam", region_name="us-east-1")
        iam_user = iam_client.create_user(UserName="test-user")["User"]
        # Create a mock IAM access keys
        access_key = iam_client.create_access_key(UserName=iam_user["UserName"])[
            "AccessKey"
        ]
        access_key_id = access_key["AccessKeyId"]
        secret_access_key = access_key["SecretAccessKey"]
        # Create AWS session to validate
        session = boto3.session.Session(
            aws_access_key_id=access_key_id,
            aws_secret_access_key=secret_access_key,
            region_name="us-east-1",
        )
        audit_info = Audit_Info()
        get_caller_identity = audit_info.validate_credentials(session)

        get_caller_identity["Arn"].should.equal(iam_user["Arn"])
        get_caller_identity["UserId"].should.equal(iam_user["UserId"])
        # assert get_caller_identity["UserId"] == str(ACCOUNT_ID)

    @patch(
        "prowler.providers.common.common.current_audit_info",
        new=mock_current_audit_info,
    )
    @mock_organizations
    @mock_sts
    @mock_iam
    def test_organizations(self):
        client = boto3.client("organizations", region_name="us-east-1")
        iam_client = boto3.client("iam", region_name="us-east-1")
        sts_client = boto3.client("sts", region_name="us-east-1")

        mockname = "mock-account"
        mockdomain = "moto-example.org"
        mockemail = "@".join([mockname, mockdomain])

        org_id = client.create_organization(FeatureSet="ALL")["Organization"]["Id"]
        account_id = client.create_account(AccountName=mockname, Email=mockemail)[
            "CreateAccountStatus"
        ]["AccountId"]

        client.tag_resource(
            ResourceId=account_id, Tags=[{"Key": "key", "Value": "value"}]
        )

        trust_policy_document = {
            "Version": "2012-10-17",
            "Statement": {
                "Effect": "Allow",
                "Principal": {
                    "AWS": "arn:aws:iam::{account_id}:root".format(
                        account_id=ACCOUNT_ID
                    )
                },
                "Action": "sts:AssumeRole",
            },
        }
        iam_role_arn = iam_client.role_arn = iam_client.create_role(
            RoleName="test-role",
            AssumeRolePolicyDocument=json.dumps(trust_policy_document),
        )["Role"]["Arn"]
        session_name = "new-session"
        assumed_role = sts_client.assume_role(
            RoleArn=iam_role_arn, RoleSessionName=session_name
        )

        audit_info = Audit_Info()
        org = audit_info.get_organizations_metadata(account_id, assumed_role)

        org.account_details_email.should.equal(mockemail)
        org.account_details_name.should.equal(mockname)
        org.account_details_arn.should.equal(
            "arn:aws:organizations::{0}:account/{1}/{2}".format(
                ACCOUNT_ID, org_id, account_id
            )
        )
        org.account_details_org.should.equal(org_id)
        org.account_details_tags.should.equal("key:value,")

    @patch(
        "prowler.providers.common.common.current_audit_info",
        new=mock_current_audit_info,
    )
    @patch.object(Audit_Info, "validate_credentials", new=mock_validate_credentials)
    @patch.object(
        Audit_Info, "print_audit_credentials", new=mock_print_audit_credentials
    )
    def test_set_audit_info_aws(self):
        provider = "aws"
        arguments = {
            "profile": None,
            "role": None,
            "session_duration": None,
            "external_id": None,
            "regions": None,
            "organizations_role": None,
            "subscriptions": None,
            "az_cli_auth": None,
            "sp_env_auth": None,
            "browser_auth": None,
            "managed_entity_auth": None,
        }

        audit_info = set_provider_audit_info(provider, arguments)
        assert isinstance(audit_info, AWS_Audit_Info)

    @patch(
        "prowler.providers.common.common.azure_audit_info", new=mock_azure_audit_info
    )
    @patch.object(Azure_Provider, "__set_credentials__", new=mock_set_credentials)
    @patch.object(Azure_Provider, "__set_identity_info__", new=mock_set_identity_info)
    def test_set_audit_info_azure(self):
        provider = "azure"
        arguments = {
            "profile": None,
            "role": None,
            "session_duration": None,
            "external_id": None,
            "regions": None,
            "organizations_role": None,
            "subscriptions": None,
            "az_cli_auth": None,
            "sp_env_auth": None,
            "browser_auth": None,
            "managed_entity_auth": None,
        }

        audit_info = set_provider_audit_info(provider, arguments)
        assert isinstance(audit_info, Azure_Audit_Info)