import json
import logging
import os

from aws_lambda_powertools import Tracer

from common.const import PERMISSION_ROLE_ALL, PERMISSION_ROLE_LIST
from common.ddb_service.client import DynamoDbUtilsService
from common.response import ok
from common.util import get_query_param
from libs.data_types import Role, PARTITION_KEYS
from libs.utils import get_permissions_by_username, get_user_roles, permissions_check, response_error

tracer = Tracer()
user_table = os.environ.get('MULTI_USER_TABLE')

logger = logging.getLogger(__name__)
logger.setLevel(os.environ.get('LOG_LEVEL') or logging.ERROR)

ddb_service = DynamoDbUtilsService(logger=logger)


# GET /roles?last_evaluated_key=xxx&limit=10&role=ROLE_NAME&filter=key:value,key:value
@tracer.capture_lambda_handler
def handler(event, ctx):
    _filter = {}

    try:
        logger.info(json.dumps(event))
        requestor_name = permissions_check(event, [PERMISSION_ROLE_ALL, PERMISSION_ROLE_LIST])

        requestor_permissions = get_permissions_by_username(ddb_service, user_table, requestor_name)
        requestor_roles = get_user_roles(ddb_service=ddb_service, user_table_name=user_table, username=requestor_name)

        role = get_query_param(event, 'role', 0)

        last_evaluated_key = None
        if not role:
            result = ddb_service.query_items(user_table,
                                             key_values={
                                                 'kind': PARTITION_KEYS.role
                                             })

            scan_rows = result
            if type(result) is tuple:
                scan_rows = result[0]
                last_evaluated_key = result[1]
        else:
            scan_rows = ddb_service.query_items(user_table, key_values={
                'kind': PARTITION_KEYS.role,
                'sort_key': role
            })

        result = []
        for row in scan_rows:
            r = Role(**(ddb_service.deserialize(row)))
            role_dto = {
                'role_name': r.sort_key,
                'creator': r.creator,
                'permissions': r.permissions
            }

            if 'role' in requestor_permissions and 'all' in requestor_permissions['role']:
                result.append(role_dto)
            elif 'role' in requestor_permissions and \
                    'list' in requestor_permissions['role'] and r.creator == requestor_name:
                result.append(role_dto)
            elif r.sort_key in requestor_roles and 'role' in requestor_permissions and \
                    'list' in requestor_permissions['role']:
                result.append(role_dto)

        result = sort_roles(result)

        data = {
            'roles': result,
            'last_evaluated_key': last_evaluated_key
        }

        return ok(data=data)
    except Exception as e:
        return response_error(e)


def sort_roles(data):
    if len(data) == 0:
        return data

    return sorted(data, key=lambda x: x['role_name'], reverse=True)