// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.

import { APIResource } from '../../core/resource';
import { APIPromise } from '../../core/api-promise';
import { PagePromise, V4PagePaginationArray, type V4PagePaginationArrayParams } from '../../core/pagination';
import { RequestOptions } from '../../internal/request-options';
import { path } from '../../internal/utils/path';

export class BaseClientCertificates extends APIResource {
  static override readonly _key: readonly ['clientCertificates'] = Object.freeze([
    'clientCertificates',
  ] as const);

  /**
   * Create a new API Shield mTLS Client Certificate.
   *
   * @example
   * ```ts
   * const clientCertificate =
   *   await client.clientCertificates.create({
   *     zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
   *     csr: '-----BEGIN CERTIFICATE REQUEST-----\nMIICY....\n-----END CERTIFICATE REQUEST-----',
   *     validity_days: 3650,
   *   });
   * ```
   */
  create(params: ClientCertificateCreateParams, options?: RequestOptions): APIPromise<ClientCertificate> {
    const { zone_id, ...body } = params;
    return (
      this._client.post(path`/zones/${zone_id}/client_certificates`, { body, ...options }) as APIPromise<{
        result: ClientCertificate;
      }>
    )._thenUnwrap((obj) => obj.result);
  }

  /**
   * List all of your Zone's API Shield mTLS Client Certificates by Status and/or
   * using Pagination.
   *
   * @example
   * ```ts
   * // Automatically fetches more pages as needed.
   * for await (const clientCertificate of client.clientCertificates.list(
   *   { zone_id: '023e105f4ecef8ad9ca31a8372d0c353' },
   * )) {
   *   // ...
   * }
   * ```
   */
  list(
    params: ClientCertificateListParams,
    options?: RequestOptions,
  ): PagePromise<ClientCertificatesV4PagePaginationArray, ClientCertificate> {
    const { zone_id, ...query } = params;
    return this._client.getAPIList(
      path`/zones/${zone_id}/client_certificates`,
      V4PagePaginationArray<ClientCertificate>,
      { query, ...options },
    );
  }

  /**
   * Set a API Shield mTLS Client Certificate to pending_revocation status for
   * processing to revoked status.
   *
   * @example
   * ```ts
   * const clientCertificate =
   *   await client.clientCertificates.delete(
   *     '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
   *     { zone_id: '023e105f4ecef8ad9ca31a8372d0c353' },
   *   );
   * ```
   */
  delete(
    clientCertificateID: string,
    params: ClientCertificateDeleteParams,
    options?: RequestOptions,
  ): APIPromise<ClientCertificate> {
    const { zone_id } = params;
    return (
      this._client.delete(
        path`/zones/${zone_id}/client_certificates/${clientCertificateID}`,
        options,
      ) as APIPromise<{ result: ClientCertificate }>
    )._thenUnwrap((obj) => obj.result);
  }

  /**
   * If a API Shield mTLS Client Certificate is in a pending_revocation state, you
   * may reactivate it with this endpoint.
   *
   * @example
   * ```ts
   * const clientCertificate =
   *   await client.clientCertificates.edit(
   *     '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
   *     { zone_id: '023e105f4ecef8ad9ca31a8372d0c353' },
   *   );
   * ```
   */
  edit(
    clientCertificateID: string,
    params: ClientCertificateEditParams,
    options?: RequestOptions,
  ): APIPromise<ClientCertificate> {
    const { zone_id, ...body } = params;
    return (
      this._client.patch(path`/zones/${zone_id}/client_certificates/${clientCertificateID}`, {
        body,
        ...options,
      }) as APIPromise<{ result: ClientCertificate }>
    )._thenUnwrap((obj) => obj.result);
  }

  /**
   * Get Details for a single mTLS API Shield Client Certificate.
   *
   * @example
   * ```ts
   * const clientCertificate =
   *   await client.clientCertificates.get(
   *     '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
   *     { zone_id: '023e105f4ecef8ad9ca31a8372d0c353' },
   *   );
   * ```
   */
  get(
    clientCertificateID: string,
    params: ClientCertificateGetParams,
    options?: RequestOptions,
  ): APIPromise<ClientCertificate> {
    const { zone_id } = params;
    return (
      this._client.get(
        path`/zones/${zone_id}/client_certificates/${clientCertificateID}`,
        options,
      ) as APIPromise<{ result: ClientCertificate }>
    )._thenUnwrap((obj) => obj.result);
  }
}
export class ClientCertificates extends BaseClientCertificates {}

export type ClientCertificatesV4PagePaginationArray = V4PagePaginationArray<ClientCertificate>;

export interface ClientCertificate {
  /**
   * Client Certificate Tag
   */
  id?: string;

  /**
   * The Client Certificate PEM.
   */
  certificate?: string;

  /**
   * Certificate Authority used to issue the Client Certificate.
   */
  certificate_authority?: ClientCertificate.CertificateAuthority;

  /**
   * Common Name of the Client Certificate.
   */
  common_name?: string;

  /**
   * Country, provided by the CSR.
   */
  country?: string;

  /**
   * The Certificate Signing Request (CSR). Must be newline-encoded.
   */
  csr?: string;

  /**
   * Date that the Client Certificate expires.
   */
  expires_on?: string;

  /**
   * Unique identifier of the Client Certificate.
   */
  fingerprint_sha256?: string;

  /**
   * Date that the Client Certificate was issued by the Certificate Authority.
   */
  issued_on?: string;

  /**
   * Location, provided by the CSR.
   */
  location?: string;

  /**
   * Organization, provided by the CSR.
   */
  organization?: string;

  /**
   * Organizational Unit, provided by the CSR.
   */
  organizational_unit?: string;

  /**
   * The serial number on the created Client Certificate.
   */
  serial_number?: string;

  /**
   * The type of hash used for the Client Certificate..
   */
  signature?: string;

  /**
   * Subject Key Identifier.
   */
  ski?: string;

  /**
   * State, provided by the CSR.
   */
  state?: string;

  /**
   * Client Certificates may be active or revoked, and the pending_reactivation or
   * pending_revocation represent in-progress asynchronous transitions.
   */
  status?: 'active' | 'pending_reactivation' | 'pending_revocation' | 'revoked';

  /**
   * The number of days the Client Certificate will be valid after the issued_on
   * date.
   */
  validity_days?: number;
}

export namespace ClientCertificate {
  /**
   * Certificate Authority used to issue the Client Certificate.
   */
  export interface CertificateAuthority {
    id?: string;

    name?: string;
  }
}

export interface ClientCertificateCreateParams {
  /**
   * Path param: Identifier.
   */
  zone_id: string;

  /**
   * Body param: The Certificate Signing Request (CSR). Must be newline-encoded.
   */
  csr: string;

  /**
   * Body param: The number of days the Client Certificate will be valid after the
   * issued_on date.
   */
  validity_days: number;
}

export interface ClientCertificateListParams extends V4PagePaginationArrayParams {
  /**
   * Path param: Identifier.
   */
  zone_id: string;

  /**
   * Query param: Limit to the number of records returned.
   */
  limit?: number;

  /**
   * Query param: Offset the results.
   */
  offset?: number;

  /**
   * Query param: Client Certitifcate Status to filter results by.
   */
  status?: 'all' | 'active' | 'pending_reactivation' | 'pending_revocation' | 'revoked';
}

export interface ClientCertificateDeleteParams {
  /**
   * Identifier.
   */
  zone_id: string;
}

export interface ClientCertificateEditParams {
  /**
   * Path param: Identifier.
   */
  zone_id: string;

  /**
   * Body param
   */
  reactivate?: boolean;
}

export interface ClientCertificateGetParams {
  /**
   * Identifier.
   */
  zone_id: string;
}

export declare namespace ClientCertificates {
  export {
    type ClientCertificate as ClientCertificate,
    type ClientCertificatesV4PagePaginationArray as ClientCertificatesV4PagePaginationArray,
    type ClientCertificateCreateParams as ClientCertificateCreateParams,
    type ClientCertificateListParams as ClientCertificateListParams,
    type ClientCertificateDeleteParams as ClientCertificateDeleteParams,
    type ClientCertificateEditParams as ClientCertificateEditParams,
    type ClientCertificateGetParams as ClientCertificateGetParams,
  };
}