package auth

import (
	"context"

	"github.com/hashicorp/vault/api"
)

func init() { register(approleMethod{}) }

type approleMethod struct{}

func (approleMethod) Name() string         { return "approle" }
func (approleMethod) DisplayName() string  { return "AppRole" }
func (approleMethod) DefaultMount() string { return "approle" }

func (approleMethod) Fields() []Field {
	return []Field{
		{Name: "role_id", Label: "Role ID", Kind: FieldText, Required: true,
			EnvFallback: []string{"VAULT_ROLE_ID"}},
		{Name: "secret_id", Label: "Secret ID", Kind: FieldSecret, Required: true,
			EnvFallback: []string{"VAULT_SECRET_ID"}},
	}
}

func (approleMethod) Login(ctx context.Context, c *api.Client, req Request) (*api.Secret, error) {
	mount := mountOf(req, "approle")
	return loginWrite(ctx, c, mount, "login", map[string]interface{}{
		"role_id":   req.Creds.Get("role_id"),
		"secret_id": req.Creds.Get("secret_id"),
	})
}