from typing import Any

from airflow.providers.fab.auth_manager.security_manager.override import FabAirflowSecurityManagerOverride
from flask_appbuilder.security.manager import AUTH_OAUTH
import os

AUTH_TYPE = AUTH_OAUTH
AUTH_USER_REGISTRATION = True
AUTH_USER_REGISTRATION_ROLE = os.environ["AIRFLOW_WEBSERVER_USER_REGISTRATION_ROLE"]
PERMANENT_SESSION_LIFETIME = 1800

OAUTH_PROVIDERS = [
    {
        "name": "github",
        "icon": "fa-github",
        "token_key": "access_token",
        "remote_app": {
            "client_id": os.getenv("GITHUB_OAUTH_APP_ID"),
            "client_secret": os.getenv("GITHUB_OAUTH_APP_SECRET"),
            "api_base_url": "https://api.github.com",
            "client_kwargs": {"scope": "read:user, read:org"},
            "access_token_url": "https://github.com/login/oauth/access_token",
            "authorize_url": "https://github.com/login/oauth/authorize",
            "request_token_url": None,
        },
    },
]


class GithubAuthorizer(FabAirflowSecurityManagerOverride):
    def get_oauth_user_info(self, provider: str, resp: Any) -> dict[str, str | list[str]]:
        remote_app = self.appbuilder.sm.oauth_remotes[provider]
        me = remote_app.get("user")
        user_data = me.json()
        username = user_data["login"]

        try:
            name_surname_list = user_data["name"].split(" ", 1)
            first_name = name_surname_list[0]
            last_name = name_surname_list[1]
        except Exception:
            first_name = last_name = "unknown"

        return {
            "username": username,
            "email": user_data["email"],
            "first_name": first_name,
            "last_name": last_name,
        }


SECURITY_MANAGER_CLASS = GithubAuthorizer