# The Okta software accompanied by this notice is provided pursuant to the following terms:
# Copyright © 2025-Present, Okta, Inc.
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the
# License.
# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS
# IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and limitations under the License.
# coding: utf-8

"""
Okta Admin Management

Allows customers to easily access the Okta Management APIs

The version of the OpenAPI document: 5.1.0
Contact: devex-public@okta.com
Generated by OpenAPI Generator (https://openapi-generator.tech)

Do not edit the class manually.
"""  # noqa: E501

from __future__ import annotations

import json
import pprint
import re  # noqa: F401
from typing import Any, ClassVar, Dict, List
from typing import Optional, Set

from pydantic import BaseModel, ConfigDict, Field, StrictInt, StrictStr
from typing_extensions import Self

from okta.models.saml_attribute_statement import SamlAttributeStatement


class OINSaml20ApplicationSettingsSignOn(BaseModel):
    """
    Contains SAML 2.0 sign-on mode attributes. > **Note:** Set `destinationOverride` to configure any other SAML 2.0
    attributes in this section.
    """  # noqa: E501

    attribute_statements: Optional[List[SamlAttributeStatement]] = Field(
        default=None,
        description="A list of custom attribute statements for the app's SAML assertion. See [SAML 2.0 Technical Overview]("
        "https://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-tech-overview-2.0-cd-02.html).  There are "
        "two types of attribute statements: | Type | Description | | ---- | ----------- | | EXPRESSION | Generic "
        "attribute statement that can be dynamic and supports [Okta Expression Language]("
        "https://developer.okta.com/docs/reference/okta-expression-language/) | | GROUP | Group attribute "
        "statement | ",
        alias="attributeStatements",
    )
    audience_override: Optional[StrictStr] = Field(
        default=None,
        description="Audience override for CASB configuration. See [CASB config guide]("
        "https://help.okta.com/en-us/Content/Topics/Apps/CASB-config-guide.htm).",
        alias="audienceOverride",
    )
    default_relay_state: Optional[StrictStr] = Field(
        default=None,
        description="Identifies a specific application resource in an IdP-initiated SSO scenario",
        alias="defaultRelayState",
    )
    destination_override: Optional[StrictStr] = Field(
        default=None,
        description="Destination override for CASB configuration. See [CASB config guide]("
        "https://help.okta.com/en-us/Content/Topics/Apps/CASB-config-guide.htm).",
        alias="destinationOverride",
    )
    recipient_override: Optional[StrictStr] = Field(
        default=None,
        description="Recipient override for CASB configuration. See [CASB config guide]("
        "https://help.okta.com/en-us/Content/Topics/Apps/CASB-config-guide.htm).",
        alias="recipientOverride",
    )
    saml_assertion_lifetime_seconds: Optional[StrictInt] = Field(
        default=None,
        description="Determines the SAML app session lifetimes with Okta",
        alias="samlAssertionLifetimeSeconds",
    )
    sso_acs_url_override: Optional[StrictStr] = Field(
        default=None,
        description="Assertion Consumer Service (ACS) URL override for CASB configuration. See [CASB config guide]("
        "https://help.okta.com/en-us/Content/Topics/Apps/CASB-config-guide.htm).",
        alias="ssoAcsUrlOverride",
    )
    __properties: ClassVar[List[str]] = [
        "attributeStatements",
        "audienceOverride",
        "defaultRelayState",
        "destinationOverride",
        "recipientOverride",
        "samlAssertionLifetimeSeconds",
        "ssoAcsUrlOverride",
    ]

    model_config = ConfigDict(
        populate_by_name=True,
        validate_assignment=True,
        protected_namespaces=(),
    )

    def to_str(self) -> str:
        """Returns the string representation of the model using alias"""
        return pprint.pformat(self.model_dump(by_alias=True))

    def to_json(self) -> str:
        """Returns the JSON representation of the model using alias"""
        # TODO: pydantic v2: use .model_dump_json(by_alias=True, exclude_unset=True) instead
        return json.dumps(self.to_dict())

    @classmethod
    def from_json(cls, json_str: str) -> Optional[Self]:
        """Create an instance of OINSaml20ApplicationSettingsSignOn from a JSON string"""
        return cls.from_dict(json.loads(json_str))

    def to_dict(self) -> Dict[str, Any]:
        """Return the dictionary representation of the model using alias.

        This has the following differences from calling pydantic's
        `self.model_dump(by_alias=True)`:

        * `None` is only added to the output dict for nullable fields that
          were set at model initialization. Other fields with value `None`
          are ignored.
        """
        excluded_fields: Set[str] = set([])

        _dict = self.model_dump(
            by_alias=True,
            exclude=excluded_fields,
            exclude_none=True,
        )
        # override the default output from pydantic by calling `to_dict()` of each item in attribute_statements (list)
        _items = []
        if self.attribute_statements:
            for _item in self.attribute_statements:
                if _item:
                    _items.append(_item.to_dict())
            _dict["attributeStatements"] = _items
        # set to None if audience_override (nullable) is None
        # and model_fields_set contains the field
        if (
            self.audience_override is None
            and "audience_override" in self.model_fields_set
        ):
            _dict["audienceOverride"] = None

        # set to None if default_relay_state (nullable) is None
        # and model_fields_set contains the field
        if (
            self.default_relay_state is None
            and "default_relay_state" in self.model_fields_set
        ):
            _dict["defaultRelayState"] = None

        # set to None if destination_override (nullable) is None
        # and model_fields_set contains the field
        if (
            self.destination_override is None
            and "destination_override" in self.model_fields_set
        ):
            _dict["destinationOverride"] = None

        # set to None if recipient_override (nullable) is None
        # and model_fields_set contains the field
        if (
            self.recipient_override is None
            and "recipient_override" in self.model_fields_set
        ):
            _dict["recipientOverride"] = None

        # set to None if sso_acs_url_override (nullable) is None
        # and model_fields_set contains the field
        if (
            self.sso_acs_url_override is None
            and "sso_acs_url_override" in self.model_fields_set
        ):
            _dict["ssoAcsUrlOverride"] = None

        return _dict

    @classmethod
    def from_dict(cls, obj: Optional[Dict[str, Any]]) -> Optional[Self]:
        """Create an instance of OINSaml20ApplicationSettingsSignOn from a dict"""
        if obj is None:
            return None

        if not isinstance(obj, dict):
            return cls.model_validate(obj)

        _obj = cls.model_validate(
            {
                "attributeStatements": (
                    [
                        SamlAttributeStatement.from_dict(_item)
                        for _item in obj["attributeStatements"]
                    ]
                    if obj.get("attributeStatements") is not None
                    else None
                ),
                "audienceOverride": obj.get("audienceOverride"),
                "defaultRelayState": obj.get("defaultRelayState"),
                "destinationOverride": obj.get("destinationOverride"),
                "recipientOverride": obj.get("recipientOverride"),
                "samlAssertionLifetimeSeconds": obj.get("samlAssertionLifetimeSeconds"),
                "ssoAcsUrlOverride": obj.get("ssoAcsUrlOverride"),
            }
        )
        return _obj
