/**
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements. See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License. You may obtain a copy of the License at
 * <p>
 * http://www.apache.org/licenses/LICENSE-2.0
 * <p>
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.jboss.installer.postinstall.ldap;

import org.jboss.installer.postinstall.task.utils.ModelDescriptionConstants;
import org.jboss.dmr.ModelNode;

import java.util.List;

import static org.jboss.installer.postinstall.task.utils.ModelUtils.createEmptyOperation;
import static org.jboss.installer.postinstall.task.utils.ModelUtils.pathAddress;

public class SecurityDomain {

    public ModelNode createSecurityDomain(SecurityDomainModel config) {
        ModelNode op = createEmptyOperation(ModelDescriptionConstants.ADD,
                pathAddress("subsystem", "elytron").add("security-domain", config.getDomainName()));
        final ModelNode realm = new ModelNode();
        realm.get("realm").set(config.getRealmName());
        op.get("realms").set(List.of(realm));
        op.get("default-realm").set(config.getRealmName());
        op.get("permission-mapper").set("default-permission-mapper");
        if (config.isGroupDecoder()) {
            op.get("role-decoder").set("groups-to-roles");
        }

        return op;
    }

}
