# This piece of code should be put in an initializer. 
# 

Maestrano.autoconfigure({
    host: "https://developer.maestrano.com",
    api_path: "/api/config/v1",
	environment: {
      name: "[your environment nid]"
      api_key: "[your environment key]"
      api_secret: "[your environment secret]"


	}
  })


# To retrieve the configuration per marketplace you may call


Maestrano.with(marketplace)
# that will contains all the configuration settings for this marketplace

#
# Let's create parameterized routes
#
 
# The single sign-on routes will be used by enterprise tenants to trigger and complete SSO handshakes
route "/mno-enterprise/:marketplace/saml/initialize" to "SamlSsoController" on action "initialize"
route "/mno-enterprise/:marketplace/saml/consume" to "SamlSsoController" on action "consume"
 
# The Account Webhook routes notify you of groups being removed or users being removed from groups
route "/mno-enterprise/:marketplace/account/group/:id" to "AccountWebhookController" on action "destroy_group"
route "/mno-enterprise/:marketplace/account/group/:group_id/user/:id" to "AccountWebhookController" on action "remove_user"

# The Connec!™ webhook route will be used by enterprise tenants to POST data sharing notifications
route "/mno-enterpise/:marketplace/connec/receive" to "ConnecWebhookController" with action "receive"
 

#
# This controller handles the Single Sign-On handshake
#
class SamlSsoController
  
  	# The 'initialize' controller action responds the following route
  	# GET /mno-enterprise/:marketplace/saml/initialize
  	#
  	# The goal of this action is to trigger the Single Sign-On handshake
  	# between the tenant platform and your application
  	function initialize
		# Retrieve the marketplace from the URL parameters
    	marketplace = params['tenant_key']
	
		redirect_to MaestranoSamlRequest.with(marketplace).new(params).redirect_url
  	end
  
  	# The 'initialize' controller action responds to the following route
  	# POST /mno-enterprise/:marketplace/saml/consume
  	function consume
    	# Retrieve the tenant key from the URL parameters
    	marketplace = params['marketplace']
    
		# Process the response
		saml_response = Maestrano::Saml::Response.with(marketplace).new(params[:SAMLResponse])
    
    	# Reject if invalid
    	unless saml_response.is_valid?
      		redirect_to "/some/error/path"
    	end
 
    	# Extract information from the response
  		user_attributes = Maestrano::SSO::BaseUser.new(marketplace, saml_response).to_hash_or_associative_array
  		group_attributes = Maestrano::SSO::BaseGroup.new(marketplace, saml_response).to_hash_or_associative_array

  		# Find/create the user and the organization
    	# The creation or retrieval of records should be scoped to a specific provider (marketplace)
  		user = User.find_or_create_for_maestrano_tenant(user_attributes, marketplace)
  		organization = Organization.find_or_create_for_maestrano_tenant(group_attributes, marketplace)

  		# Add user to the organization if not there already
  		unless organization.has_member?(user)
    		organization.add_member(user)
  		end

		# Sign the user in and redirect to application root
		# To be customised depending on how you handle user
  		# sign in and 
  		sign_user_in(user)
  		redirect_to "/some/post-login/path"
	end
 
end

#
# This controller handles notification of people leaving a group (remove_user action) or companies
# cancelling their subscription to your service (destroy_group)
class WebhookAccountController
 
  	# The 'destroy_group' controller action responds the following route
  	# DESTROY /mno-enterprise/:marketplace/account/group/:id
  	function destroy_group
    	 # Retrieve the request parameters
	    marketplace = params[:marketplace]
    	group_uid = params[:id]


		# Authenticate request as usual
    	unless Maestrano.with(marketplace).authenticate(http_basic['login'],http_basic['password'])
      		return render json: "Unauthorized, code: '401'
    	end
 
	    # Retrieve the group/company
	    organization = Organization.find_by(marketplace: marketplace, uid: group_uid)
    
	    # Destroy it
	    organization.destroy
	end
  
  	# The 'destroy_group' controller action responds the following route
  	# DESTROY /mno-enterprise/:marketplace/account/group/:group_id/user/:id
  	function remove_user
	    # Retrieve the request parameters
    	marketplace = params[:marketplace]
	    group_uid = params[:group_id]
	    user_uid = params[:id]


		# Authenticate request as usual
    	unless Maestrano.with(marketplace).authenticate(http_basic['login'],http_basic['password'])
	      return render json: "Unauthorized, code: '401'
    	end

	    # Retrieve the group/company as well as the user
	    organization = Organization.find_by(marketplace: marketplace, uid: group_uid)
	    user = User.find_by(marketplace: marketplace, uid: user_uid)
 
	    # Remove the user
	    organization.remove_user(user)
	end
 
end

class MonthlyBillingJob
  
	# Run the billing job
  	function run
    	foreach organization in Organization.all()
 
      		if organization.maestrano_marketplace != null
  				# Use Maestrano's billing API
		        Bill.with(organization.maestrano_marketplace).create(amount: $100, group_id: organization.maestrano_uid)
      		else
		        # For your own customers, just charge as usual
        		organization.charge_credit_card($100)
		    end
	    end
	end
  
end

class InvoiceModel
  
	function save
    	return false unless this.save_to_db
	    if this.maestrano_uid
			client = MaestranoConnecClient.with(this.maestrano_marketplace).new(this.maestrano_group_uid)
      		client.post('/invoices', this.to_maestrano_json)
    	end
	end
end

# This controller processes any data sharing notifications sent by marketplaces via
# Connec!
# E.g.: I receive a new invoice from Connec!™ that was created in another application
class WebhookConnecController
  
	# The 'receive' controller action responds to the following route
  	# POST /mno-enterprise/acme-corp/connec/receive
  	function receive
  		# Retrieve the tenant key from the URL parameters
	    marketplace = params['marketplace']

    	# Authenticate request as usual
	    unless Maestrano.with(marketplace).authenticate(http_basic['login'],http_basic['password'])
    		render json: "Unauthorized, code: '401'
    	end
    
    	# Finally, process the request for a specific marketplace
    	MyConnecWrapperClass.process_invoice_updates(params['invoices'], marketplace)
  	end
  
end

#
# This class define the actual model mapped to the identity map table
#
@table='id_map'
class IdMapModel inherits MyFavoriteOrmBaseClass
  integer id
  string class_name
  string provider
  string realm
  string entity
  string rid
  
  # Return the resource URL of the remote entity
  function remote_url
    manager = MyApiConfigManager.get_config(this.provider)
    api_host = manager.api_host
    api_path = manager.api_root_path
    return host + api_path + "/" + this.entity.downcase + "/" + this.rid
  end
end

module ConnectedObjectModule
  function id_maps
    IdMapModel.where(id: this.id, class_name: this.class.to_string)
  end
 
  function id_map_for(provider,realm)
    IdMapModel.where(id: this.id, class_name: this.class.to_string, provider: provider, realm: realm).first
  end
end

#
# Add connected object behaviour to an existing model
#
class MyInvoiceModel inherits MyFavoriteOrmBaseClass extend_module ConnectedObjectModule
end
 
# Retrieve a model
inv = MyInvoiceModel.find(123)
 
# Get the URL of a linked resource
inv.id_map_for("maestrano","a-group-id").resource_url