# Copyright 2014 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

"""Module containing helpers for interacting with oauth2."""


import json
from six.moves import urllib


DEFAULT_SCOPE = 'https://www.googleapis.com/auth/clouddevices'
OAUTH_URL = 'https://accounts.google.com/o/oauth2'
# Constant used in oauth2 protocol for device requests.
REDIRECT_URI = 'urn:ietf:wg:oauth:2.0:oob'


def get_oauth2_auth_url(client_id, scope=DEFAULT_SCOPE):
    auth_url = '%s/%s' % (OAUTH_URL, 'auth')
    params = dict(client_id=client_id,
                  scope=scope,
                  response_type='code',
                  redirect_uri=REDIRECT_URI)
    return '%s?%s' % (auth_url, urllib.parse.urlencode(params))


def get_oauth2_user_token(client_id, client_secret, code):
    """Returns the oauth2 token for a user given the auth code."""
    token_url = '%s/%s' % (OAUTH_URL, 'token')
    headers = {'Content-Type': 'application/x-www-form-urlencoded'}
    data = dict(code=code,
                client_id=client_id,
                client_secret=client_secret,
                redirect_uri=REDIRECT_URI,
                grant_type='authorization_code')

    request = urllib.request.Request(token_url,
                                     data=urllib.parse.urlencode(data),
                                     headers=headers)
    url_h = urllib.request.urlopen(request)
    auth_result = json.loads(url_h.read())
    return '%s %s' % (auth_result['token_type'],
                      auth_result['access_token'])


def get_oauth2_robot_token(client_id, client_secret, code):
    """Returns the oauth2 token for a robot account to use."""
    token_url = '%s/%s' % (OAUTH_URL, 'token')
    headers = {'Content-Type': 'application/x-www-form-urlencoded'}
    data = dict(code=code,
                client_id=client_id,
                client_secret=client_secret,
                redirect_uri='oob',
                grant_type='authorization_code')

    request = urllib.request.Request(token_url,
                                     data=urllib.parse.urlencode(data),
                                     headers=headers)
    url_h = urllib.request.urlopen(request)
    auth_result = json.loads(url_h.read())
    return '%s %s' % (auth_result['token_type'],
                      auth_result['access_token'])