class AmexTokenizationClient

# File lib/amex_tokenization_client.rb, line 20
def initialize(host:,
               token_requester_id:,
               client_id:, client_secret:,
               encryption_key_id:, encryption_key:,
               logger: Logger.new('/dev/null'))
  @host = host
  @base_path = "/payments/digital/v2/tokens".freeze
  @token_requester_id = token_requester_id
  @client_id, @client_secret = client_id, client_secret
  @encryption_key_id, @encryption_key = encryption_key_id, Base64.decode64(encryption_key)
  @logger = logger
end

# File lib/amex_tokenization_client.rb, line 95
def headers(authorization)
  Hash[
    'Content-Type' => 'application/json',
    'Content-Language' => 'en-US',
    'Accept-Language' => 'en',
    'x-amex-token-requester-id' => token_requester_id,
    'x-amex-api-key' => client_id,
    'x-amex-request-id' => SecureRandom.uuid,
    'authorization' => authorization,
  ]
end

# File lib/amex_tokenization_client.rb, line 81
def hmac_authorization(method, resource_path, payload, nonce = SecureRandom.uuid, ts = (Time.now.to_r * 1000).to_i)
  bodyhash = hmac_digest(payload)
  mac = hmac_digest([ts, nonce, method, resource_path, host, 443, bodyhash, ''].join("\n"))
  %(MAC id="#{client_id}",ts="#{ts}",nonce="#{nonce}",bodyhash="#{bodyhash}",mac="#{mac}")
end

# File lib/amex_tokenization_client.rb, line 87
def hmac_digest(s)
  Base64.strict_encode64(OpenSSL::HMAC.digest(OpenSSL::Digest::SHA256.new, client_secret, s.to_s))
end

# File lib/amex_tokenization_client.rb, line 67
def jwe_decrypt(data)
  JWE.decrypt(data, encryption_key)
end

# File lib/amex_tokenization_client.rb, line 55
def metadata(token_ref_id)
  JSON.parse send_authorized_request('GET', "#{token_ref_id}/metadata")
end

# File lib/amex_tokenization_client.rb, line 91
def new_request(method, resource_path, authorization)
  Request.new(method, "https://#{host}/#{resource_path}", headers(authorization), logger: logger)
end

# File lib/amex_tokenization_client.rb, line 47
def notifications(kargs)
  send_authorized_request('POST', 'notifications', notifications_payload(kargs))
end

# File lib/amex_tokenization_client.rb, line 63
def notifications_payload(kargs)
  NotificationsPayload.new(kargs).to_json(encryption_key_id, encryption_key)
end

# File lib/amex_tokenization_client.rb, line 34
def provisioning(kargs)
  response = JSON.parse send_authorized_request('POST', 'provisioning', provisioning_payload(kargs))
  response.merge! JSON.parse jwe_decrypt response.delete('secure_token_data')
  response
end

# File lib/amex_tokenization_client.rb, line 59
def provisioning_payload(kargs)
  ProvisioningPayload.new(kargs).to_json(encryption_key_id, encryption_key)
end

# File lib/amex_tokenization_client.rb, line 41
def provisionings(kargs)
  response = JSON.parse send_authorized_request('POST', 'provisionings', provisioning_payload(kargs))
  response.merge! JSON.parse jwe_decrypt response.delete('secure_token_data')
  response
end

# File lib/amex_tokenization_client.rb, line 71
def send_authorized_request(method, route, payload = nil)
  resource_path = "#{base_path}/#{route}"
  authorization = hmac_authorization(method, resource_path, payload)
  new_request(method, resource_path, authorization).send(payload)
end

# File lib/amex_tokenization_client.rb, line 51
def status(token_ref_id)
  JSON.parse send_authorized_request('GET', "#{token_ref_id}/status")
end