"""Unit tests for workspacesweb-supported APIs."""

import re

import boto3

from moto import mock_aws

# See our Development Tips on writing tests for hints on how to write good tests:
# http://docs.getmoto.org/en/latest/docs/contributing/development_tips/tests.html

FAKE_SECURITY_GROUP_IDS = ["sg-0123456789abcdef0"]
FAKE_SUBNET_IDS = ["subnet-0123456789abcdef0", "subnet-abcdef0123456789"]
FAKE_TAGS = [
    {"Key": "TestKey", "Value": "TestValue"},
    {"Key": "TestKey2", "Value": "TestValue2"},
]
FAKE_VPC_ID = "vpc-0123456789abcdef0"
FAKE_KMS_KEY_ID = "abcd1234-5678-90ab-cdef-FAKEKEY"


@mock_aws
def test_create_network_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    response = client.create_network_settings(
        securityGroupIds=FAKE_SECURITY_GROUP_IDS,
        subnetIds=FAKE_SUBNET_IDS,
        tags=FAKE_TAGS,
        vpcId=FAKE_VPC_ID,
    )
    network_settings_arn = response["networkSettingsArn"]
    arn_regex = r"^arn:aws:workspaces-web:eu-west-1:\d{12}:network-settings/[a-f0-9-]+$"
    assert re.match(arn_regex, network_settings_arn) is not None


@mock_aws
def test_list_network_settings():
    client = boto3.client("workspaces-web", region_name="ap-southeast-1")
    arn = client.create_network_settings(
        securityGroupIds=FAKE_SECURITY_GROUP_IDS,
        subnetIds=FAKE_SUBNET_IDS,
        tags=FAKE_TAGS,
        vpcId=FAKE_VPC_ID,
    )["networkSettingsArn"]
    resp = client.list_network_settings()
    assert resp["networkSettings"][0]["networkSettingsArn"] == arn
    assert len(resp["networkSettings"]) == 1


@mock_aws
def test_get_network_settings():
    client = boto3.client("workspaces-web", region_name="ap-southeast-1")
    arn = client.create_network_settings(
        securityGroupIds=FAKE_SECURITY_GROUP_IDS,
        subnetIds=FAKE_SUBNET_IDS,
        tags=FAKE_TAGS,
        vpcId=FAKE_VPC_ID,
    )["networkSettingsArn"]
    resp = client.get_network_settings(networkSettingsArn=arn)["networkSettings"]
    assert resp["networkSettingsArn"] == arn


@mock_aws
def test_delete_network_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_network_settings(
        securityGroupIds=FAKE_SECURITY_GROUP_IDS,
        subnetIds=FAKE_SUBNET_IDS,
        tags=FAKE_TAGS,
        vpcId=FAKE_VPC_ID,
    )["networkSettingsArn"]
    client.delete_network_settings(networkSettingsArn=arn)
    resp = client.list_network_settings()
    assert resp["networkSettings"] == [], "Expected no network settings"


@mock_aws
def test_create_browser_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    response = client.create_browser_settings(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        browserPolicy="TestBrowserPolicy",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        tags=FAKE_TAGS,
    )
    browser_settings_arn = response["browserSettingsArn"]
    arn_regex = r"^arn:aws:workspaces-web:eu-west-1:\d{12}:browser-settings/[a-f0-9-]+$"
    assert re.match(arn_regex, browser_settings_arn) is not None


@mock_aws
def test_list_browser_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_browser_settings(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        browserPolicy="TestBrowserPolicy",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        tags=FAKE_TAGS,
    )["browserSettingsArn"]
    resp = client.list_browser_settings()
    assert resp["browserSettings"][0]["browserSettingsArn"] == arn


@mock_aws
def test_get_browser_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_browser_settings(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        browserPolicy="TestBrowserPolicy",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        tags=FAKE_TAGS,
    )["browserSettingsArn"]
    resp = client.get_browser_settings(browserSettingsArn=arn)["browserSettings"]
    assert resp["browserSettingsArn"] == arn


@mock_aws
def test_delete_browser_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_browser_settings(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        browserPolicy="TestBrowserPolicy",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        tags=FAKE_TAGS,
    )["browserSettingsArn"]
    client.delete_browser_settings(browserSettingsArn=arn)
    resp = client.list_browser_settings()
    assert resp["browserSettings"] == []


@mock_aws
def test_create_portal():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    resp = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )
    assert resp["portalArn"]
    assert resp["portalEndpoint"]


@mock_aws
def test_list_portals():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    resp = client.list_portals()
    assert resp["portals"][0]["portalArn"] == arn
    assert len(resp["portals"]) == 1
    assert resp["portals"][0]["authenticationType"] == "Standard"


@mock_aws
def test_get_portal():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    resp = client.get_portal(portalArn=arn)["portal"]
    assert resp["portalArn"] == arn, f"Expected ARN {arn} in response"
    assert resp["authenticationType"] == "Standard", (
        "Expected authentication type in response"
    )
    assert resp["instanceType"] == "TestInstanceType", (
        "Expected instance type in response"
    )
    assert resp["maxConcurrentSessions"] == 5, (
        "Expected max concurrent sessions in response"
    )


@mock_aws
def test_delete_portal():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    client.delete_portal(portalArn=arn)
    assert len(client.list_portals()["portals"]) == 0, "Expected no portals"


@mock_aws
def test_associate_browser_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    browser_settings_arn = client.create_browser_settings(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        browserPolicy="TestBrowserPolicy",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        tags=FAKE_TAGS,
    )["browserSettingsArn"]
    portal_arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    client.associate_browser_settings(
        browserSettingsArn=browser_settings_arn, portalArn=portal_arn
    )
    resp = client.get_portal(portalArn=portal_arn)["portal"]
    assert resp["browserSettingsArn"] == browser_settings_arn
    resp = client.get_browser_settings(browserSettingsArn=browser_settings_arn)[
        "browserSettings"
    ]
    assert resp["associatedPortalArns"] == [portal_arn]


@mock_aws
def test_associate_network_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    network_arn = client.create_network_settings(
        securityGroupIds=FAKE_SECURITY_GROUP_IDS,
        subnetIds=FAKE_SUBNET_IDS,
        tags=FAKE_TAGS,
        vpcId=FAKE_VPC_ID,
    )["networkSettingsArn"]
    portal_arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    client.associate_network_settings(
        networkSettingsArn=network_arn, portalArn=portal_arn
    )
    resp = client.get_portal(portalArn=portal_arn)["portal"]
    assert resp["networkSettingsArn"] == network_arn
    resp = client.get_network_settings(networkSettingsArn=network_arn)[
        "networkSettings"
    ]
    assert resp["associatedPortalArns"] == [portal_arn]


@mock_aws
def test_create_user_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    resp = client.create_user_settings(
        copyAllowed="Disabled",
        pasteAllowed="Disabled",
        printAllowed="Disabled",
        uploadAllowed="Disabled",
        downloadAllowed="Disabled",
    )
    user_settings_arn = resp["userSettingsArn"]
    arn_regex = r"^arn:aws:workspaces-web:eu-west-1:\d{12}:user-settings/[a-f0-9-]+$"
    assert re.match(arn_regex, user_settings_arn) is not None


@mock_aws
def test_get_user_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    resp = client.create_user_settings(
        copyAllowed="Enabled",
        pasteAllowed="Disabled",
        printAllowed="Enabled",
        uploadAllowed="Disabled",
        downloadAllowed="Enabled",
    )
    user_settings_arn = resp["userSettingsArn"]
    resp = client.get_user_settings(userSettingsArn=user_settings_arn)["userSettings"]
    assert resp["userSettingsArn"] == user_settings_arn
    assert resp["copyAllowed"] == "Enabled"
    assert resp["pasteAllowed"] == "Disabled"
    assert resp["printAllowed"] == "Enabled"
    assert resp["uploadAllowed"] == "Disabled"
    assert resp["downloadAllowed"] == "Enabled"


@mock_aws
def test_list_user_settings():
    client = boto3.client("workspaces-web", region_name="ap-southeast-1")
    arn = client.create_user_settings(
        copyAllowed="Disabled",
        pasteAllowed="Disabled",
        printAllowed="Disabled",
        uploadAllowed="Disabled",
        downloadAllowed="Disabled",
    )["userSettingsArn"]
    resp = client.list_user_settings()
    assert resp["userSettings"][0]["userSettingsArn"] == arn


@mock_aws
def test_delete_user_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_user_settings(
        copyAllowed="Disabled",
        pasteAllowed="Disabled",
        printAllowed="Disabled",
        uploadAllowed="Disabled",
        downloadAllowed="Disabled",
    )["userSettingsArn"]
    client.delete_user_settings(userSettingsArn=arn)
    assert len(client.list_user_settings()["userSettings"]) == 0


@mock_aws
def test_associate_user_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    user_settings_arn = client.create_user_settings(
        copyAllowed="Disabled",
        pasteAllowed="Disabled",
        printAllowed="Disabled",
        uploadAllowed="Disabled",
        downloadAllowed="Disabled",
    )["userSettingsArn"]
    portal_arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    client.associate_user_settings(
        userSettingsArn=user_settings_arn, portalArn=portal_arn
    )
    resp = client.get_portal(portalArn=portal_arn)["portal"]
    assert resp["userSettingsArn"] == user_settings_arn
    resp = client.get_user_settings(userSettingsArn=user_settings_arn)["userSettings"]
    assert resp["associatedPortalArns"] == [portal_arn]


@mock_aws
def test_create_user_access_logging_settings():
    client = boto3.client("workspaces-web", region_name="ap-southeast-1")
    user_access_logging_settings_arn = client.create_user_access_logging_settings(
        kinesisStreamArn="arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream",
    )["userAccessLoggingSettingsArn"]
    arn_regex = r"^arn:aws:workspaces-web:ap-southeast-1:\d{12}:user-access-logging-settings/[a-f0-9-]+$"
    assert re.match(arn_regex, user_access_logging_settings_arn) is not None


@mock_aws
def test_get_user_access_logging_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    user_access_logging_settings_arn = client.create_user_access_logging_settings(
        kinesisStreamArn="arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream",
    )["userAccessLoggingSettingsArn"]
    resp = client.get_user_access_logging_settings(
        userAccessLoggingSettingsArn=user_access_logging_settings_arn
    )["userAccessLoggingSettings"]
    assert resp["userAccessLoggingSettingsArn"] == user_access_logging_settings_arn
    assert (
        resp["kinesisStreamArn"]
        == "arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream"
    )


@mock_aws
def test_list_user_access_logging_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    arn = client.create_user_access_logging_settings(
        kinesisStreamArn="arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream",
    )["userAccessLoggingSettingsArn"]
    resp = client.list_user_access_logging_settings()
    assert resp["userAccessLoggingSettings"][0]["userAccessLoggingSettingsArn"] == arn


@mock_aws
def test_delete_user_access_logging_settings():
    client = boto3.client("workspaces-web", region_name="ap-southeast-1")
    arn = client.create_user_access_logging_settings(
        kinesisStreamArn="arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream",
    )["userAccessLoggingSettingsArn"]
    client.delete_user_access_logging_settings(userAccessLoggingSettingsArn=arn)
    resp = client.list_user_access_logging_settings()
    assert resp["userAccessLoggingSettings"] == []


@mock_aws
def test_associate_user_access_logging_settings():
    client = boto3.client("workspaces-web", region_name="eu-west-1")
    user_access_logging_settings_arn = client.create_user_access_logging_settings(
        kinesisStreamArn="arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream",
    )["userAccessLoggingSettingsArn"]
    portal_arn = client.create_portal(
        additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
        authenticationType="Standard",
        clientToken="TestClient",
        customerManagedKey=FAKE_KMS_KEY_ID,
        displayName="TestDisplayName",
        instanceType="TestInstanceType",
        maxConcurrentSessions=5,
        tags=FAKE_TAGS,
    )["portalArn"]
    client.associate_user_access_logging_settings(
        userAccessLoggingSettingsArn=user_access_logging_settings_arn,
        portalArn=portal_arn,
    )
    resp = client.get_portal(portalArn=portal_arn)["portal"]
    assert resp["userAccessLoggingSettingsArn"] == user_access_logging_settings_arn
    resp = client.get_user_access_logging_settings(
        userAccessLoggingSettingsArn=user_access_logging_settings_arn
    )["userAccessLoggingSettings"]
    assert resp["associatedPortalArns"] == [portal_arn]


@mock_aws
def test_list_tags_for_resource():
    client = boto3.client("workspaces-web", region_name="ap-southeast-1")

    OTHER_FAKE_TAGS = [
        {"Key": "FAKEKEY1", "Value": "FAKEVALUE1"},
        {"Key": "FAKEKEY2", "Value": "FAKEVALUE2"},
    ]

    arns = []

    arns.append(
        client.create_portal(
            additionalEncryptionContext={"Key1": "Encryption", "Key2": "Context"},
            authenticationType="Standard",
            clientToken="TestClient",
            customerManagedKey=FAKE_KMS_KEY_ID,
            displayName="TestDisplayName",
            instanceType="TestInstanceType",
            maxConcurrentSessions=5,
            tags=FAKE_TAGS,
        )["portalArn"]
    )

    arns.append(
        client.create_network_settings(
            securityGroupIds=FAKE_SECURITY_GROUP_IDS,
            subnetIds=FAKE_SUBNET_IDS,
            tags=FAKE_TAGS,
            vpcId=FAKE_VPC_ID,
        )["networkSettingsArn"]
    )

    arns.append(
        client.create_user_settings(
            copyAllowed="Disabled",
            pasteAllowed="Disabled",
            printAllowed="Disabled",
            uploadAllowed="Disabled",
            downloadAllowed="Disabled",
            tags=FAKE_TAGS,
        )["userSettingsArn"]
    )

    arns.append(
        client.create_user_access_logging_settings(
            kinesisStreamArn="arn:aws:kinesis:ap-southeast-1:123456789012:stream/TestStream",
            tags=FAKE_TAGS,
        )["userAccessLoggingSettingsArn"]
    )

    arns.append(
        client.create_browser_settings(
            additionalEncryptionContext={"Key1": "Value1", "Key2": "Value2"},
            browserPolicy="TestBrowserPolicy",
            clientToken="TestClient",
            customerManagedKey=FAKE_KMS_KEY_ID,
            tags=FAKE_TAGS,
        )["browserSettingsArn"]
    )

    for arn in arns:
        resp = client.list_tags_for_resource(resourceArn=arn)
        assert resp["tags"] == FAKE_TAGS

        client.tag_resource(resourceArn=arn, tags=OTHER_FAKE_TAGS)
        resp = client.list_tags_for_resource(resourceArn=arn)
        assert resp["tags"] == FAKE_TAGS + OTHER_FAKE_TAGS

        client.untag_resource(resourceArn=arn, tagKeys=["FAKEKEY1", "TestKey"])
        resp = client.list_tags_for_resource(resourceArn=arn)
        assert resp["tags"] == [
            {"Key": "TestKey2", "Value": "TestValue2"},
            {"Key": "FAKEKEY2", "Value": "FAKEVALUE2"},
        ]