# The Okta software accompanied by this notice is provided pursuant to the following terms:
# Copyright © 2025-Present, Okta, Inc.
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the
# License.
# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS
# IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and limitations under the License.
# coding: utf-8

"""
Okta Admin Management

Allows customers to easily access the Okta Management APIs

The version of the OpenAPI document: 5.1.0
Contact: devex-public@okta.com
Generated by OpenAPI Generator (https://openapi-generator.tech)

Do not edit the class manually.
"""  # noqa: E501

from __future__ import annotations

import json
import pprint
import re  # noqa: F401
from datetime import datetime
from typing import Any, ClassVar, Dict, List
from typing import Optional, Set

from pydantic import BaseModel, ConfigDict, Field, SecretStr, StrictStr, field_validator
from typing_extensions import Annotated
from typing_extensions import Self

from okta.models.service_account_status import ServiceAccountStatus
from okta.models.service_account_status_detail import ServiceAccountStatusDetail


class AppServiceAccount(BaseModel):
    """
    AppServiceAccount
    """  # noqa: E501

    container_global_name: Optional[StrictStr] = Field(
        default=None,
        description="The key name of the app in the Okta Integration Network (OIN)",
        alias="containerGlobalName",
    )
    container_instance_name: Optional[StrictStr] = Field(
        default=None,
        description="The app instance label",
        alias="containerInstanceName",
    )
    container_orn: StrictStr = Field(
        description="The [ORN](/openapi/okta-management/guides/roles/#okta-resource-name-orn) of the relevant resource.  Use "
        "the specific app ORN format (`orn:{partition}:idp:{yourOrgId}:apps:{appType}:{appId}`) to identify an "
        "Okta app instance in your org.",
        alias="containerOrn",
    )
    created: Optional[datetime] = Field(
        default=None, description="Timestamp when the app service account was created"
    )
    description: Optional[
        Annotated[str, Field(min_length=0, strict=True, max_length=255)]
    ] = Field(default=None, description="The description of the app service account")
    id: Optional[Annotated[str, Field(strict=True)]] = Field(
        default=None, description="The UUID of the app service account"
    )
    last_updated: Optional[datetime] = Field(
        default=None,
        description="Timestamp when the app service account was last updated",
        alias="lastUpdated",
    )
    name: Annotated[str, Field(min_length=1, strict=True, max_length=50)] = Field(
        description="The user-defined name for the app service account"
    )
    owner_group_ids: Optional[
        Annotated[List[StrictStr], Field(min_length=0, max_length=10)]
    ] = Field(
        default=None,
        description="A list of IDs of the Okta groups who own the app service account",
        alias="ownerGroupIds",
    )
    owner_user_ids: Optional[
        Annotated[List[StrictStr], Field(min_length=0, max_length=10)]
    ] = Field(
        default=None,
        description="A list of IDs of the Okta users who own the app service account",
        alias="ownerUserIds",
    )
    password: Optional[SecretStr] = Field(
        default=None,
        description="The app service account password. Required for apps that don't have provisioning enabled or don't "
        "support password synchronization.",
    )
    status: Optional[ServiceAccountStatus] = None
    status_detail: Optional[ServiceAccountStatusDetail] = Field(
        default=None, alias="statusDetail"
    )
    username: Annotated[str, Field(min_length=1, strict=True, max_length=100)] = Field(
        description="The username that serves as the direct link to your managed app account. Ensure that this value "
        "precisely matches the identifier of the target app account."
    )
    __properties: ClassVar[List[str]] = [
        "containerGlobalName",
        "containerInstanceName",
        "containerOrn",
        "created",
        "description",
        "id",
        "lastUpdated",
        "name",
        "ownerGroupIds",
        "ownerUserIds",
        "password",
        "status",
        "statusDetail",
        "username",
    ]

    @field_validator("id")
    def id_validate_regular_expression(cls, value):
        """Validates the regular expression"""
        if value is None:
            return value

        if not re.match(
            r"(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$",
            value,
        ):
            raise ValueError(
                r"must validate the regular expression /(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-["
                r"0-9a-f]{12}$/"
            )
        return value

    @field_validator("name")
    def name_validate_regular_expression(cls, value):
        """Validates the regular expression"""
        if not re.match(r"^[\w\-_. ]+$", value):
            raise ValueError(r"must validate the regular expression /^[\w\-_. ]+$/")
        return value

    model_config = ConfigDict(
        populate_by_name=True,
        validate_assignment=True,
        protected_namespaces=(),
    )

    def to_str(self) -> str:
        """Returns the string representation of the model using alias"""
        return pprint.pformat(self.model_dump(by_alias=True))

    def to_json(self) -> str:
        """Returns the JSON representation of the model using alias"""
        # TODO: pydantic v2: use .model_dump_json(by_alias=True, exclude_unset=True) instead
        return json.dumps(self.to_dict())

    @classmethod
    def from_json(cls, json_str: str) -> Optional[Self]:
        """Create an instance of AppServiceAccount from a JSON string"""
        return cls.from_dict(json.loads(json_str))

    def to_dict(self) -> Dict[str, Any]:
        """Return the dictionary representation of the model using alias.

        This has the following differences from calling pydantic's
        `self.model_dump(by_alias=True)`:

        * `None` is only added to the output dict for nullable fields that
          were set at model initialization. Other fields with value `None`
          are ignored.
        * OpenAPI `readOnly` fields are excluded.
        * OpenAPI `readOnly` fields are excluded.
        * OpenAPI `readOnly` fields are excluded.
        * OpenAPI `readOnly` fields are excluded.
        * OpenAPI `readOnly` fields are excluded.
        """
        excluded_fields: Set[str] = set(
            [
                "container_global_name",
                "container_instance_name",
                "created",
                "id",
                "last_updated",
            ]
        )

        _dict = self.model_dump(
            by_alias=True,
            exclude=excluded_fields,
            exclude_none=True,
        )
        return _dict

    @classmethod
    def from_dict(cls, obj: Optional[Dict[str, Any]]) -> Optional[Self]:
        """Create an instance of AppServiceAccount from a dict"""
        if obj is None:
            return None

        if not isinstance(obj, dict):
            return cls.model_validate(obj)

        _obj = cls.model_validate(
            {
                "containerGlobalName": obj.get("containerGlobalName"),
                "containerInstanceName": obj.get("containerInstanceName"),
                "containerOrn": obj.get("containerOrn"),
                "created": obj.get("created"),
                "description": obj.get("description"),
                "id": obj.get("id"),
                "lastUpdated": obj.get("lastUpdated"),
                "name": obj.get("name"),
                "ownerGroupIds": obj.get("ownerGroupIds"),
                "ownerUserIds": obj.get("ownerUserIds"),
                "password": obj.get("password"),
                "status": obj.get("status"),
                "statusDetail": obj.get("statusDetail"),
                "username": obj.get("username"),
            }
        )
        return _obj
