from ldap3 import Server, Connection, SUBTREE, ServerPool, FIRST

@api.route('/ldap/groupmembers_recursive')
class groupmembers_recursive(Resource):
    def post(self):
        response = {}
        """
        if not request.headers.get('X-Forwarded-For'):
            abort(400, {"error": "invalid request _"})
        else:
            if not ipaddress.ip_address(request.headers.get('X-Forwarded-For')).is_private:
                abort(401, {"error": "not authorized"})
        """

        if not request.headers.get('X-Secret'):
            abort(400, {"error": "invalid request"})
        else:
            if request.headers.get('X-Secret') != api_key:
                abort(401, {"error": "not authorized"})

        if not request.get_json():
            abort(400,{"error": "invalid json"})
        if not 'search_base' in request.get_json():
            abort(400,{"error": "search base not provided"})
        if not 'attributes' in request.get_json():
            abort(400,{"error": "ldap attributes not provided"})
        manifest = request.get_json()

        user_objects = []
        try:
            if manifest["protocol"] == 'ldap' or manifest["protocol"] == 'LDAP':
                use_ssl = False
            else:
                use_ssl = True

            ldap_server_list = []
            ldap_server_list.append(
                Server(manifest["server_a_address"], port=manifest["server_a_port"], use_ssl=use_ssl,
                       connect_timeout=5))
            ldap_server_list.append(
                Server(manifest["server_b_address"], port=manifest["server_b_port"], use_ssl=use_ssl,
                       connect_timeout=5))

            server_pool = ServerPool(ldap_server_list, FIRST, active=3, exhaust=True)

            ldap_connection = Connection(server_pool, user=manifest["username"], password=manifest["password"],
                                         version=manifest["ldap_version"], auto_range=True, receive_timeout=20)

            if not ldap_connection.bind():
                abort(400,{"error": "LDAP bind error " + str(ldap_connection.result)})
                #print('error in bind', ldap_connection.result)  # return non 200 response w/result

            group_dn_list = ldap_connection.extend.standard.paged_search(search_base=manifest["groups_search_base"],
                                                                         search_filter='(&(objectCategory=group)(cn=' +
                                                                                       manifest["group_name"] + '))',
                                                                         search_scope=SUBTREE,
                                                                         attributes=manifest["attributes"],
                                                                         paged_size=100000,
                                                                         generator=False)
            for group_entry in group_dn_list:
                if 'dn' in group_entry.keys():
                    #print()
                    #print('dn: ' + group_entry['dn'])
                    #ldap_connection.bind()
                    user_list = ldap_connection.extend.standard.paged_search(search_base=manifest["search_base"],
                                                                             search_filter='(&(objectCategory=Person)(sAMAccountName=*)(memberOf:1.2.840.113556.1.4.1941:=' +
                                                                                           group_entry['dn'] + '))',
                                                                             search_scope=SUBTREE,
                                                                             attributes=manifest["attributes"],
                                                                             paged_size=100000,
                                                                             generator=False)
                    for user_entry in user_list:
                        if 'dn' in user_entry.keys():
                            #print('attributes: ' + str(user_entry['attributes']))
                            user_object = {}
                            for attribute in user_entry['attributes']:
                                if user_entry['attributes'][attribute] != []:
                                    user_object[attribute] = user_entry['attributes'][attribute]
                                else:
                                    user_object[attribute] = None
                            #print('user objects: ' + str(user_object))
                            user_objects.append(user_object)

            return (user_objects)

            ldap_connection.unbind()

        except:
            abort(400, {"error": {"exception: ": str(error_handling())}})


@api.route('/ldap/groupdn')
class groupdn(Resource):
    def post(self):
        response = {}
        """
        if not request.headers.get('X-Forwarded-For'):
            abort(400, {"error": "invalid request _"})
        else:
            if not ipaddress.ip_address(request.headers.get('X-Forwarded-For')).is_private:
                abort(401, {"error": "not authorized"})
        """

        if not request.headers.get('X-Secret'):
            abort(400, {"error": "invalid request"})
        else:
            if request.headers.get('X-Secret') != api_key:
                abort(401, {"error": "not authorized"})

        if not request.get_json():
            abort(400, {"error": "invalid json"})
        if not 'search_base' in request.get_json():
            abort(400, {"error": "search base not provided"})
        if not 'attributes' in request.get_json():
            abort(400, {"error": "ldap attributes not provided"})
        manifest = request.get_json()

        user_objects = []
        try:
            if manifest["protocol"] == 'ldap' or manifest["protocol"] == 'LDAP':
                use_ssl = False
            else:
                use_ssl = True

            ldap_server_list = []
            ldap_server_list.append(
                Server(manifest["server_a_address"], port=manifest["server_a_port"], use_ssl=use_ssl,
                       connect_timeout=5))
            ldap_server_list.append(
                Server(manifest["server_b_address"], port=manifest["server_b_port"], use_ssl=use_ssl,
                       connect_timeout=5))

            server_pool = ServerPool(ldap_server_list, FIRST, active=3, exhaust=True)

            ldap_connection = Connection(server_pool, user=manifest["username"], password=manifest["password"],
                                         version=manifest["ldap_version"], auto_range=True, receive_timeout=20)

            if not ldap_connection.bind():
                abort(400, {"error": "LDAP bind error " + str(ldap_connection.result)})
                # print('error in bind', ldap_connection.result)  # return non 200 response w/result

            group_dn_list = ldap_connection.extend.standard.paged_search(search_base=manifest["groups_search_base"],
                                                                         search_filter='(&(objectCategory=group)(cn=' +
                                                                                       manifest["group_name"] + '))',
                                                                         search_scope=SUBTREE,
                                                                         attributes=manifest["attributes"],
                                                                         paged_size=100000,
                                                                         generator=False)

            for group_entry in group_dn_list:
                if 'dn' in group_entry.keys():
                    return group_entry['dn']

            ldap_connection.unbind()
            abort(400, {"error": "group dn not found"})

        except:
            abort(400, {"error": {"exception: ": str(error_handling())}})