#!/usr/bin/python3
# Dummy Password Manager for Tizen Studio CLI
#
# Copyright (c) 2021 Project CHIP Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

import argparse
import fcntl
import os
import pickle
import sys


class Secrets:

    def __init__(self, filename: str):
        self.filename = filename
        self.dirty = False
        self.secrets = {}
        self.fp = None

    def __enter__(self):
        self.fp = open(self.filename, "a+b")
        fcntl.flock(self.fp.fileno(), fcntl.LOCK_EX)
        self._load()
        return self

    def __exit__(self, _type, value, tb):
        if self.dirty:
            self._save()
        fcntl.flock(self.fp.fileno(), fcntl.LOCK_UN)
        self.fp.close()

    @staticmethod
    def _build_key(label: str, **kw):
        return label + ":" + str(tuple(sorted(kw.items())))

    def _load(self):
        try:
            self.fp.seek(0)
            self.secrets = pickle.load(self.fp)
        except EOFError:
            # Unpickling an empty file is not an error for us
            pass
        except ValueError as e:
            print("ERROR: " + str(e), file=sys.stderr)

    def _save(self):
        try:
            self.fp.seek(0)
            self.fp.truncate()
            pickle.dump(self.secrets, self.fp)
        except IOError as e:
            print("ERROR: " + str(e), file=sys.stderr)

    def clear(self, label: str, **kw):
        key = self._build_key(label, **kw)
        self.secrets.pop(key, None)
        self.dirty = True

    def store(self, label: str, password: str, **kw):
        key = self._build_key(label, **kw)
        self.secrets[key] = password
        self.dirty = True

    def lookup(self, label: str, **kw):
        key = self._build_key(label, **kw)
        return self.secrets.get(key, "")


parser = argparse.ArgumentParser(
    formatter_class=argparse.RawDescriptionHelpFormatter,
    description="""
Dummy Password Manager for Tizen Studio CLI.

This simple password manager circumvents the requirement of having functional
D-Bus Secrets service (org.freedesktop.secrets) in the Docker container. As a
storage this manager uses plain-text file with pickled data (~/.secretsdb).

Please, DO NOT store real secrets in it!""")
subparsers = parser.add_subparsers(dest='command', required=True)

parser_clear = subparsers.add_parser(
    "clear", help="Remove passward associated with given key value pairs")
parser_clear.add_argument("-l", "--label", action='store', required=True,
                          help="label for given key value pairs")
parser_clear.add_argument("kw", nargs='*',
                          help="key value pairs")

parser_store = subparsers.add_parser(
    "store", help="Store passward for given key value pairs")
parser_store.add_argument("-l", "--label", action='store', required=True,
                          help="label for given key value pairs")
parser_store.add_argument("-p", "--password", action='store', required=True,
                          help="password for given key value pairs")
parser_store.add_argument("kw", nargs='*',
                          help="key value pairs")

parser_lookup = subparsers.add_parser(
    "lookup", help="Retrieve passward associated with given key value pairs")
parser_lookup.add_argument("-l", "--label", action='store', required=True,
                           help="label for given key value pairs")
parser_lookup.add_argument("kw", nargs='*',
                           help="key value pairs")

args = parser.parse_args()
kw = dict(zip(args.kw[:: 2], args.kw[1:: 2]))

with Secrets(os.path.expanduser("~/.secretsdb")) as secrets:
    if args.command == "clear":
        secrets.clear(args.label, **kw)
    elif args.command == "store":
        secrets.store(args.label, args.password, **kw)
    elif args.command == "lookup":
        password = secrets.lookup(args.label, **kw)
        print(password)