import json, os, sys, urllib.request, urllib.parse, urllib.error

SECRETS = json.loads(os.environ.get("INTEGRATION_SECRETS", "{}"))
INPUTS = json.loads(os.environ.get("INTEGRATION_INPUTS", "{}"))
BASE = SECRETS.get("base_url", "https://api.crowdstrike.com").rstrip("/")


def token():
    data = urllib.parse.urlencode({"client_id": SECRETS.get("client_id", ""), "client_secret": SECRETS.get("client_secret", "")}).encode()
    req = urllib.request.Request(BASE + "/oauth2/token", data=data, headers={"Content-Type": "application/x-www-form-urlencoded", "Accept": "application/json"}, method="POST")
    with urllib.request.urlopen(req, timeout=30) as r:
        return json.loads(r.read()).get("access_token", "")


def call(method, path, tok, params=None, body=None):
    url = BASE + path
    if params:
        # params is a list of (key, value) tuples to allow repeated keys (e.g. ids)
        url += "?" + urllib.parse.urlencode(params)
    data = json.dumps(body).encode() if body is not None else None
    headers = {"Authorization": "Bearer " + tok, "Accept": "application/json"}
    if data is not None:
        headers["Content-Type"] = "application/json"
    req = urllib.request.Request(url, data=data, headers=headers, method=method)
    with urllib.request.urlopen(req, timeout=90) as r:
        raw = r.read()
        return json.loads(raw) if raw else {}


def csv(v):
    return [x.strip() for x in str(v or "").split(",") if x.strip()]


def main():
    tok = token()
    body = {"id": INPUTS.get("id", "")}
    exclusion_name = INPUTS.get("exclusion_name", "")
    pattern_id = INPUTS.get("pattern_id", "")
    pattern_name = INPUTS.get("pattern_name", "")
    cl_regex = INPUTS.get("cl_regex", "")
    ifn_regex = INPUTS.get("ifn_regex", "")
    comment = INPUTS.get("comment", "")
    description = INPUTS.get("description", "")
    groups = INPUTS.get("groups", "")
    detection_json = INPUTS.get("detection_json", "")

    if exclusion_name:
        body["name"] = exclusion_name
    if pattern_id:
        body["pattern_id"] = pattern_id
    if pattern_name:
        body["pattern_name"] = pattern_name
    if cl_regex:
        body["cl_regex"] = cl_regex
    if ifn_regex:
        body["ifn_regex"] = ifn_regex
    if comment:
        body["comment"] = comment
    if description:
        body["description"] = description
    if groups:
        body["groups"] = csv(groups)
    if detection_json:
        body["detection_json"] = detection_json

    result = call("PATCH", "/policy/entities/ioa-exclusions/v1", tok, body=body)
    print(json.dumps(result))


try:
    main()
except urllib.error.HTTPError as e:
    print(json.dumps({"error": "HTTP " + str(e.code), "detail": e.read().decode("utf-8", "replace")}))
    sys.exit(1)
except Exception as e:
    print(json.dumps({"error": str(e)}))
    sys.exit(1)