baron-sso/devfront/src/lib/devApi.ts

import apiClient from "./apiClient";

export type ClientStatus = "active" | "inactive";
export type ClientType = "confidential" | "public";

export type ClientSummary = {
  id: string;
  name: string;
  type: ClientType;
  status: ClientStatus;
  createdAt?: string;
  redirectUris: string[];
  scopes: string[];
};

export type ClientListResponse = {
  items: ClientSummary[];
  limit: number;
  offset: number;
};

export type ClientEndpoints = {
  discovery: string;
  issuer: string;
  authorization: string;
  token: string;
  userinfo: string;
};

export type ClientDetailResponse = {
  client: ClientSummary & {
    metadata?: Record<string, unknown>;
  };
  endpoints: ClientEndpoints;
};

export type ClientUpsertRequest = {
  id?: string;
  name?: string;
  type?: ClientType;
  status?: ClientStatus;
  redirectUris?: string[];
  scopes?: string[];
  grantTypes?: string[];
  responseTypes?: string[];
  tokenEndpointAuthMethod?: string;
  metadata?: Record<string, unknown>;
};

export type ConsentSummary = {
  subject: string;
  userName?: string;
  clientId: string;
  clientName?: string;
  grantedScopes: string[];
  authenticatedAt?: string;
  createdAt: string;
  tenantId?: string;
  tenantName?: string;
};

export type ConsentListResponse = {
  items: ConsentSummary[];
};

// --- Federation / IdP Config Types ---
export type ProviderType = "oidc" | "saml";

export type IdpConfig = {
  id: string;
  client_id: string; // Changed from tenant_id
  provider_type: ProviderType;
  display_name: string;
  status: "active" | "inactive";
  issuer_url?: string;
  // OIDC specific fields
  oidc_client_id?: string;
  oidc_client_secret?: string;
  scopes?: string;
  // SAML specific fields
  metadata_url?: string;
  metadata_xml?: string;
  entity_id?: string;
  acs_url?: string;
  createdAt: string;
  updatedAt: string;
};

export type IdpConfigCreateRequest = Omit<
  IdpConfig,
  "id" | "createdAt" | "updatedAt"
>;
export type IdpConfigUpdateRequest = Partial<IdpConfigCreateRequest>;
// --- End Federation Types ---


export async function fetchClients() {
  const { data } = await apiClient.get<ClientListResponse>("/dev/clients");
  return data;
}

export async function fetchClient(clientId: string) {
  const { data } = await apiClient.get<ClientDetailResponse>(
    `/dev/clients/${clientId}`,
  );
  return data;
}

export async function updateClientStatus(
  clientId: string,
  status: ClientStatus,
) {
  const { data } = await apiClient.patch<ClientDetailResponse>(
    `/dev/clients/${clientId}/status`,
    { status },
  );
  return data;
}

export async function createClient(payload: ClientUpsertRequest) {
  const { data } = await apiClient.post<ClientDetailResponse>(
    "/dev/clients",
    payload,
  );
  return data;
}

export async function updateClient(
  clientId: string,
  payload: ClientUpsertRequest,
) {
  const { data } = await apiClient.put<ClientDetailResponse>(
    `/dev/clients/${clientId}`,
    payload,
  );
  return data;
}

export async function deleteClient(clientId: string) {
  await apiClient.delete(`/dev/clients/${clientId}`);
}

export async function fetchConsents(subject: string, clientId?: string) {
  const params: Record<string, string> = { subject };
  if (clientId) {
    params.client_id = clientId;
  }
  const { data } = await apiClient.get<ConsentListResponse>("/dev/consents", {
    params,
  });
  return data;
}

export async function revokeConsent(subject: string, clientId?: string) {
  const params: Record<string, string> = { subject };
  if (clientId) {
    params.client_id = clientId;
  }
  await apiClient.delete("/dev/consents", { params });
}

// --- Federation / IdP Config API Calls ---

export async function listIdpConfigsForClient(clientId: string) {
  const { data } = await apiClient.get<IdpConfig[]>(
    `/dev/clients/${clientId}/idps`,
  );
  return data;
}

export async function createIdpConfigForClient(payload: IdpConfigCreateRequest) {
  const { data } = await apiClient.post<IdpConfig>(
		`/dev/clients/${payload.client_id}/idps`,
		payload,
	);
  return data;
}

export async function updateIdpConfig(
  clientId: string,
  idpId: string,
  payload: IdpConfigUpdateRequest,
) {
  const { data } = await apiClient.put<IdpConfig>(
    `/dev/clients/${clientId}/idps/${idpId}`,
    payload,
  );
  return data;
}

export async function deleteIdpConfig(clientId: string, idpId: string) {
  await apiClient.delete(`/dev/clients/${clientId}/idps/${idpId}`);
}