# The Okta software accompanied by this notice is provided pursuant to the following terms:
# Copyright © 2025-Present, Okta, Inc.
# Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the
# License.
# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.
# Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS
# IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and limitations under the License.
# coding: utf-8

"""
Okta Admin Management

Allows customers to easily access the Okta Management APIs

The version of the OpenAPI document: 5.1.0
Contact: devex-public@okta.com
Generated by OpenAPI Generator (https://openapi-generator.tech)

Do not edit the class manually.
"""  # noqa: E501

from __future__ import annotations

import json
import pprint
import re  # noqa: F401
from typing import Any, ClassVar, Dict, List
from typing import Optional, Set

from pydantic import (
    BaseModel,
    ConfigDict,
    Field,
    StrictBool,
    StrictInt,
    StrictStr,
    field_validator,
)
from typing_extensions import Self

from okta.models.okta_sign_on_policy_factor_prompt_mode import (
    OktaSignOnPolicyFactorPromptMode,
)
from okta.models.okta_sign_on_policy_rule_signon_primary_factor import (
    OktaSignOnPolicyRuleSignonPrimaryFactor,
)
from okta.models.okta_sign_on_policy_rule_signon_session_actions import (
    OktaSignOnPolicyRuleSignonSessionActions,
)


class OktaSignOnPolicyRuleSignonActions(BaseModel):
    """
    Specifies settings for the policy rule
    """  # noqa: E501

    access: Optional[StrictStr] = Field(
        default=None, description="Indicates if a user is allowed to sign in"
    )
    factor_lifetime: Optional[StrictInt] = Field(
        default=None,
        description="Interval of time that must elapse before the user is challenged for MFA, if the factor prompt mode is "
        "set to `SESSION`  > **Note:** Required only if `requireFactor` is `true`. ",
        alias="factorLifetime",
    )
    factor_prompt_mode: Optional[OktaSignOnPolicyFactorPromptMode] = Field(
        default=None, alias="factorPromptMode"
    )
    primary_factor: Optional[OktaSignOnPolicyRuleSignonPrimaryFactor] = Field(
        default=None, alias="primaryFactor"
    )
    remember_device_by_default: Optional[StrictBool] = Field(
        default=False,
        description="Indicates if Okta should automatically remember the device",
        alias="rememberDeviceByDefault",
    )
    require_factor: Optional[StrictBool] = Field(
        default=False,
        description="Indicates if multifactor authentication is required",
        alias="requireFactor",
    )
    session: Optional[OktaSignOnPolicyRuleSignonSessionActions] = None
    __properties: ClassVar[List[str]] = [
        "access",
        "factorLifetime",
        "factorPromptMode",
        "primaryFactor",
        "rememberDeviceByDefault",
        "requireFactor",
        "session",
    ]

    @field_validator("access")
    def access_validate_enum(cls, value):
        """Validates the enum"""
        if value is None:
            return value

        if value not in set(["ALLOW", "DENY"]):
            raise ValueError("must be one of enum values ('ALLOW', 'DENY')")
        return value

    model_config = ConfigDict(
        populate_by_name=True,
        validate_assignment=True,
        protected_namespaces=(),
    )

    def to_str(self) -> str:
        """Returns the string representation of the model using alias"""
        return pprint.pformat(self.model_dump(by_alias=True))

    def to_json(self) -> str:
        """Returns the JSON representation of the model using alias"""
        # TODO: pydantic v2: use .model_dump_json(by_alias=True, exclude_unset=True) instead
        return json.dumps(self.to_dict())

    @classmethod
    def from_json(cls, json_str: str) -> Optional[Self]:
        """Create an instance of OktaSignOnPolicyRuleSignonActions from a JSON string"""
        return cls.from_dict(json.loads(json_str))

    def to_dict(self) -> Dict[str, Any]:
        """Return the dictionary representation of the model using alias.

        This has the following differences from calling pydantic's
        `self.model_dump(by_alias=True)`:

        * `None` is only added to the output dict for nullable fields that
          were set at model initialization. Other fields with value `None`
          are ignored.
        """
        excluded_fields: Set[str] = set([])

        _dict = self.model_dump(
            by_alias=True,
            exclude=excluded_fields,
            exclude_none=True,
        )
        # override the default output from pydantic by calling `to_dict()` of session
        if self.session:
            if not isinstance(self.session, dict):
                _dict["session"] = self.session.to_dict()
            else:
                _dict["session"] = self.session

        return _dict

    @classmethod
    def from_dict(cls, obj: Optional[Dict[str, Any]]) -> Optional[Self]:
        """Create an instance of OktaSignOnPolicyRuleSignonActions from a dict"""
        if obj is None:
            return None

        if not isinstance(obj, dict):
            return cls.model_validate(obj)

        _obj = cls.model_validate(
            {
                "access": obj.get("access"),
                "factorLifetime": obj.get("factorLifetime"),
                "factorPromptMode": obj.get("factorPromptMode"),
                "primaryFactor": obj.get("primaryFactor"),
                "rememberDeviceByDefault": (
                    obj.get("rememberDeviceByDefault")
                    if obj.get("rememberDeviceByDefault") is not None
                    else False
                ),
                "requireFactor": (
                    obj.get("requireFactor")
                    if obj.get("requireFactor") is not None
                    else False
                ),
                "session": (
                    OktaSignOnPolicyRuleSignonSessionActions.from_dict(obj["session"])
                    if obj.get("session") is not None
                    else None
                ),
            }
        )
        return _obj
