module "admin_authorizer" {
  source = "git::https://github.com/johnsosoka/jscom-tf-modules.git//modules/lambda-authorizer?ref=main"

  function_name              = "my-api-admin-authorizer"
  api_gateway_id             = module.api_gateway.api_gateway_id
  api_gateway_execution_arn  = module.api_gateway.api_gateway_execution_arn
  admin_api_key_value        = var.admin_api_key

  project_name = "my-project"
}

# Use the authorizer on a protected route
resource "aws_apigatewayv2_route" "admin_route" {
  api_id    = module.api_gateway.api_gateway_id
  route_key = "GET /admin/stats"
  target    = "integrations/${aws_apigatewayv2_integration.admin.id}"

  authorization_type = "CUSTOM"
  authorizer_id      = module.admin_authorizer.authorizer_id
}

module "static_website" {
  source = "git::https://github.com/johnsosoka/jscom-tf-modulese.git/modules/static-website?ref=main"
  domain_name = "files.johnsosoka.com"
  root_zone_id = data.terraform_remote_state.jscom_common_data.outputs.root_johnsosokacom_zone_id
  acm_cert_id = data.terraform_remote_state.jscom_common_data.outputs.jscom_acm_cert
}

module "api_gateway_test" {
  source                  = "./base-api"
  api_gateway_name        = "test-api-gateway"
  api_gateway_description = "Test API Gateway module setup"
  custom_domain_name      = "test.johnsosoka.com"
  domain_certificate_arn  = local.acm_cert_id
  route53_zone_id         = local.root_zone_id

  tags = {
    Environment = "test"
    Project     = "api-gateway-module-test"
  }
}

output "api_gateway_id" {
  description = "ID of the API Gateway"
  value       = module.api_gateway_test.api_gateway_id
}

output "api_gateway_execution_arn" {
  description = "Default endpoint of the API Gateway"
  value       = module.api_gateway_test.api_gateway_execution_arn
}

output "custom_domain_name" {
  description = "Custom domain name for the API Gateway"
  value       = module.api_gateway_test.custom_domain_name
}

output "custom_domain_name_target" {
  description = "Target domain name for the Route53 alias"
  value       = module.api_gateway_test.custom_domain_name_target
}

output "custom_domain_hosted_zone_id" {
  description = "Hosted Zone ID for the custom domain"
  value       = module.api_gateway_test.custom_domain_hosted_zone_id
}

resource "aws_lambda_function" "test_function" {
  filename         = "test_function.zip"
  function_name    = "test-function"
  handler          = "test.handler"
  runtime          = "nodejs18.x"
  source_code_hash = filebase64sha256("test_function.zip")

  role = aws_iam_role.lambda_execution_role.arn
}

resource "aws_iam_role" "lambda_execution_role" {
  name               = "lambda_execution_role"
  assume_role_policy = data.aws_iam_policy_document.lambda_assume_role.json
}

data "aws_iam_policy_document" "lambda_assume_role" {
  statement {
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

resource "aws_apigatewayv2_integration" "test_integration" {
  api_id             = data.terraform_remote_state.api_gateway.outputs.api_gateway_id
  integration_type   = "AWS_PROXY"
  integration_method = "POST"
  integration_uri    = aws_lambda_function.test_function.invoke_arn
  payload_format_version = "2.0"
}

resource "aws_apigatewayv2_route" "test_route" {
  api_id    = data.terraform_remote_state.api_gateway.outputs.api_gateway_id
  route_key = "POST /test"
  target    = "integrations/${aws_apigatewayv2_integration.test_integration.id}"
}

resource "aws_lambda_permission" "allow_apigw_invoke" {
  statement_id  = "AllowAPIGatewayInvoke"
  action        = "lambda:InvokeFunction"
  function_name = aws_lambda_function.test_function.function_name
  principal     = "apigateway.amazonaws.com"

  source_arn = "${data.terraform_remote_state.api_gateway.outputs.api_gateway_execution_arn}/*/*"
}

output "test_route_endpoint" {
  value = "${data.terraform_remote_state.api_gateway.outputs.custom_domain_name}/test"
}

module "pypi_repo" {
  source = "git::https://github.com/johnsosoka/jscom-tf-modules.git//modules/codeartifact-pypi?ref=main"

  domain_name     = "johnsosoka"
  repository_name = "pypi"

  tags = {
    Project     = "jscom-infrastructure"
    Environment = "production"
  }
}

# Output pip configuration instructions
output "pip_setup" {
  value = module.pypi_repo.pip_config_instructions
}