# The Okta software accompanied by this notice is provided pursuant to the following terms:
# Copyright © 2025-Present, Okta, Inc.
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the
# License.
# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS
# IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and limitations under the License.
# coding: utf-8

"""
Okta Admin Management

Allows customers to easily access the Okta Management APIs

The version of the OpenAPI document: 5.1.0
Contact: devex-public@okta.com
Generated by OpenAPI Generator (https://openapi-generator.tech)

Do not edit the class manually.
"""  # noqa: E501

from __future__ import annotations

import json
import pprint
import re  # noqa: F401
from typing import Any, ClassVar, Dict, List
from typing import Optional, Set

from pydantic import BaseModel, ConfigDict, Field, StrictStr, field_validator
from typing_extensions import Self

from okta.models.o_auth_client_secret_links import OAuthClientSecretLinks


class OAuth2ClientJsonEncryptionKeyResponse(BaseModel):
    """
    <x-lifecycle-container><x-lifecycle class=\"ea\"></x-lifecycle></x-lifecycle-container>A [JSON Web Key (JWK)](
    https://tools.ietf.org/html/rfc7517) is a JSON representation of a cryptographic key. Okta uses an encryption key to
    encrypt an ID token JWT minted by the org authorization server or custom authorization server. Okta supports only RSA
    keys for encrypting tokens.
    """  # noqa: E501

    e: Optional[StrictStr] = Field(
        default=None, description="RSA key value (exponent) for key binding"
    )
    kty: Optional[StrictStr] = Field(
        default=None,
        description="Cryptographic algorithm family for the certificate's key pair",
    )
    n: Optional[StrictStr] = Field(
        default=None, description="RSA key value (modulus) for key binding"
    )
    use: Optional[StrictStr] = Field(
        default=None, description="Acceptable use of the JSON Web Key"
    )
    kid: Optional[StrictStr] = Field(
        default=None,
        description="Unique identifier of the JSON Web Key in the OAUth 2.0 client's JWKS",
    )
    status: Optional[StrictStr] = Field(
        default="ACTIVE", description="Status of the OAuth 2.0 client JSON Web Key"
    )
    created: Optional[StrictStr] = Field(
        default=None,
        description="Timestamp when the OAuth 2.0 client JSON Web Key was created",
    )
    id: Optional[StrictStr] = Field(
        default=None, description="The unique ID of the OAuth Client JSON Web Key"
    )
    last_updated: Optional[StrictStr] = Field(
        default=None,
        description="Timestamp when the OAuth 2.0 client JSON Web Key was updated",
        alias="lastUpdated",
    )
    links: Optional[OAuthClientSecretLinks] = Field(default=None, alias="_links")
    __properties: ClassVar[List[str]] = [
        "kid",
        "status",
        "created",
        "id",
        "lastUpdated",
        "_links",
    ]

    @field_validator("kty")
    def kty_validate_enum(cls, value):
        """Validates the enum"""
        if value is None:
            return value

        if value not in set(["RSA"]):
            raise ValueError("must be one of enum values ('RSA')")
        return value

    @field_validator("use")
    def use_validate_enum(cls, value):
        """Validates the enum"""
        if value is None:
            return value

        if value not in set(["enc"]):
            raise ValueError("must be one of enum values ('enc')")
        return value

    @field_validator("status")
    def status_validate_enum(cls, value):
        """Validates the enum"""
        if value is None:
            return value

        if value not in set(["ACTIVE", "INACTIVE"]):
            raise ValueError("must be one of enum values ('ACTIVE', 'INACTIVE')")
        return value

    model_config = ConfigDict(
        populate_by_name=True,
        validate_assignment=True,
        protected_namespaces=(),
    )

    def to_str(self) -> str:
        """Returns the string representation of the model using alias"""
        return pprint.pformat(self.model_dump(by_alias=True))

    def to_json(self) -> str:
        """Returns the JSON representation of the model using alias"""
        # TODO: pydantic v2: use .model_dump_json(by_alias=True, exclude_unset=True) instead
        return json.dumps(self.to_dict())

    @classmethod
    def from_json(cls, json_str: str) -> Optional[Self]:
        """Create an instance of OAuth2ClientJsonEncryptionKeyResponse from a JSON string"""
        return cls.from_dict(json.loads(json_str))

    def to_dict(self) -> Dict[str, Any]:
        """Return the dictionary representation of the model using alias.

        This has the following differences from calling pydantic's
        `self.model_dump(by_alias=True)`:

        * `None` is only added to the output dict for nullable fields that
          were set at model initialization. Other fields with value `None`
          are ignored.
        * OpenAPI `readOnly` fields are excluded.
        * OpenAPI `readOnly` fields are excluded.
        * OpenAPI `readOnly` fields are excluded.
        """
        excluded_fields: Set[str] = set(
            [
                "created",
                "id",
                "last_updated",
            ]
        )

        _dict = self.model_dump(
            by_alias=True,
            exclude=excluded_fields,
            exclude_none=True,
        )
        # override the default output from pydantic by calling `to_dict()` of links
        if self.links:
            if not isinstance(self.links, dict):
                _dict["_links"] = self.links.to_dict()
            else:
                _dict["_links"] = self.links

        # set to None if kid (nullable) is None
        # and model_fields_set contains the field
        if self.kid is None and "kid" in self.model_fields_set:
            _dict["kid"] = None

        return _dict

    @classmethod
    def from_dict(cls, obj: Optional[Dict[str, Any]]) -> Optional[Self]:
        """Create an instance of OAuth2ClientJsonEncryptionKeyResponse from a dict"""
        if obj is None:
            return None

        if not isinstance(obj, dict):
            return cls.model_validate(obj)

        _obj = cls.model_validate(
            {
                "kid": obj.get("kid"),
                "status": (
                    obj.get("status") if obj.get("status") is not None else "ACTIVE"
                ),
                "created": obj.get("created"),
                "id": obj.get("id"),
                "lastUpdated": obj.get("lastUpdated"),
                "_links": (
                    OAuthClientSecretLinks.from_dict(obj["_links"])
                    if obj.get("_links") is not None
                    else None
                ),
            }
        )
        return _obj
