/*
    * Copyright (c) 2016 ingenieux Labs
    *
    * Licensed under the Apache License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    *
    * http://www.apache.org/licenses/LICENSE-2.0
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package br.com.ingenieux.mojo.beanstalk.bundle;
  
  import com.amazonaws.auth.AWSCredentialsProvider;
  
  import org.apache.commons.codec.binary.Hex;
  import org.apache.commons.codec.digest.DigestUtils;
  
  import java.util.Date;
  
  public class CodeCommitRequestSigner extends RequestSignerBase {
    final String repoName;
  
    public CodeCommitRequestSigner(AWSCredentialsProvider credentialsProvider, String repoName, Date date) {
      super(credentialsProvider.getCredentials(), "us-east-1", "codecommit", date);
      this.repoName = repoName;
    }
  
    public String getPushUrl() {
      String user = awsCredentials.getAWSAccessKeyId();
  
      String host = "git-codecommit.us-east-1.amazonaws.com";
  
      String path = "/v1/repos/" + repoName;
  
      String scope = String.format("%s/%s/%s/%s", strDate, region, service, TERMINATOR);
  
      StringBuilder stringToSign = new StringBuilder();
  
      stringToSign.append(String.format("%s-%s\n%s\n%s\n", SCHEME, AWS_ALGORITHM, strDateTime, scope));
  
      stringToSign.append(DigestUtils.sha256Hex(String.format("GIT\n%s\n\nhost:%s\n\nhost\n", path, host).getBytes()));
  
      byte[] key = deriveKey();
  
      byte[] digest = hash(key, stringToSign.toString());
  
      String signature = Hex.encodeHexString(digest);
  
      String password = strDateTime.concat("Z").concat(signature);
  
      String returnUrl = String.format("https://%s:%s@%s%s", user, password, host, path);
  
      return returnUrl;
    }
  }