# The Okta software accompanied by this notice is provided pursuant to the following terms:
# Copyright © 2025-Present, Okta, Inc.
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the
# License.
# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS
# IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and limitations under the License.
# coding: utf-8

"""
Okta Admin Management

Allows customers to easily access the Okta Management APIs

The version of the OpenAPI document: 5.1.0
Contact: devex-public@okta.com
Generated by OpenAPI Generator (https://openapi-generator.tech)

Do not edit the class manually.
"""  # noqa: E501

from __future__ import annotations

import json
import pprint
import re  # noqa: F401
from typing import Any, ClassVar, Dict, List
from typing import Optional, Set

from pydantic import BaseModel, ConfigDict, Field, StrictBool
from typing_extensions import Annotated
from typing_extensions import Self

from okta.models.o_auth_endpoint_authentication_method import (
    OAuthEndpointAuthenticationMethod,
)


class ApplicationCredentialsOAuthClient(BaseModel):
    """
    ApplicationCredentialsOAuthClient
    """  # noqa: E501

    auto_key_rotation: Optional[StrictBool] = Field(
        default=True, description="Requested key rotation mode", alias="autoKeyRotation"
    )
    client_id: Optional[
        Annotated[str, Field(min_length=6, strict=True, max_length=100)]
    ] = Field(
        default=None,
        description="Unique identifier for the OAuth 2.0 client app  > **Notes:** > * If you don't specify the `client_id`, "
        "this immutable property is populated with the [Application instance ID]("
        "/openapi/okta-management/management/tag/Application/#tag/Application/operation/getApplication!c=200"
        "&path=4/id&t=response). > * The `client_id` must consist of alphanumeric characters or the following "
        "special characters: `$-_.+!*'(),`. > * You can't use the reserved word `ALL_CLIENTS`.",
    )
    client_secret: Optional[
        Annotated[str, Field(min_length=14, strict=True, max_length=100)]
    ] = Field(
        default=None,
        description="OAuth 2.0 client secret string (used for confidential clients)  > **Notes:** If a `client_secret` isn't "
        "provided on creation, and the `token_endpoint_auth_method` requires one, Okta generates a random "
        "`client_secret` for the client app. > The `client_secret` is only shown when an OAuth 2.0 client app is "
        "created or updated (and only if the `token_endpoint_auth_method` requires a client secret).",
    )
    pkce_required: Optional[StrictBool] = Field(
        default=True,
        description="Requires Proof Key for Code Exchange (PKCE) for additional verification. If "
        "`token_endpoint_auth_method` is `none`, then `pkce_required` must be `true`. The default is `true` for "
        "browser and native app types.",
    )
    token_endpoint_auth_method: Optional[OAuthEndpointAuthenticationMethod] = (
        OAuthEndpointAuthenticationMethod.CLIENT_SECRET_BASIC
    )
    __properties: ClassVar[List[str]] = [
        "autoKeyRotation",
        "client_id",
        "client_secret",
        "pkce_required",
        "token_endpoint_auth_method",
    ]

    model_config = ConfigDict(
        populate_by_name=True,
        validate_assignment=True,
        protected_namespaces=(),
    )

    def to_str(self) -> str:
        """Returns the string representation of the model using alias"""
        return pprint.pformat(self.model_dump(by_alias=True))

    def to_json(self) -> str:
        """Returns the JSON representation of the model using alias"""
        # TODO: pydantic v2: use .model_dump_json(by_alias=True, exclude_unset=True) instead
        return json.dumps(self.to_dict())

    @classmethod
    def from_json(cls, json_str: str) -> Optional[Self]:
        """Create an instance of ApplicationCredentialsOAuthClient from a JSON string"""
        return cls.from_dict(json.loads(json_str))

    def to_dict(self) -> Dict[str, Any]:
        """Return the dictionary representation of the model using alias.

        This has the following differences from calling pydantic's
        `self.model_dump(by_alias=True)`:

        * `None` is only added to the output dict for nullable fields that
          were set at model initialization. Other fields with value `None`
          are ignored.
        """
        excluded_fields: Set[str] = set([])

        _dict = self.model_dump(
            by_alias=True,
            exclude=excluded_fields,
            exclude_none=True,
        )
        return _dict

    @classmethod
    def from_dict(cls, obj: Optional[Dict[str, Any]]) -> Optional[Self]:
        """Create an instance of ApplicationCredentialsOAuthClient from a dict"""
        if obj is None:
            return None

        if not isinstance(obj, dict):
            return cls.model_validate(obj)

        _obj = cls.model_validate(
            {
                "autoKeyRotation": (
                    obj.get("autoKeyRotation")
                    if obj.get("autoKeyRotation") is not None
                    else True
                ),
                "client_id": obj.get("client_id"),
                "client_secret": obj.get("client_secret"),
                "pkce_required": (
                    obj.get("pkce_required")
                    if obj.get("pkce_required") is not None
                    else True
                ),
                "token_endpoint_auth_method": obj.get("token_endpoint_auth_method"),
            }
        )
        return _obj
