#!/usr/bin/env bash

#
# Env vars
#

SSH_CFG_PATH="$(readlink -f ~/.ssh)"
SSH_USER_KEY="$SSH_CFG_PATH/id_ed25519"
SSH_USER_PUBLIC_KEY="$SSH_USER_KEY.pub"
SSH_USER_CERT="$SSH_USER_KEY-cert.pub"

GREEN_CHECK="\e[32m✔\e[0m"
RED_X="\e[31m✗\e[0m"
YELLOW_BANG="\e[33m!\e[0m"
MAGENTA_QUESTION="\e[35m?\e[0m"
UP_ONE_LINE="\e[1A"

#
# Function Definitions
#

reset_line() {
    echo -en "\r\e[K"
}

title_msg() {
    local title="\e[1m${1:-Title}:\e[0m"
    local prompt="${2:-Prompt for the user}"
    # printf "%b %b" "$title" "$prompt"
    echo -e "$title $prompt"
}

prompt_user() {
    full_prompt_msg="$(title_msg "${1}" "${2}")"
    echo -n -e "$MAGENTA_QUESTION $full_prompt_msg"
    read -p " (y/n) " -n 1 -r
}

update_prompt() {
    local icon="$1"
    case $# in
        1) msg="$full_prompt_msg $REPLY";;
        2) msg="$2";;
        3) msg="$(title_msg "${2}" "${3}")";;
        *) msg="Too many arguments";;
    esac

    reset_line
    echo -e "$icon $msg"
}

reupdate_prompt() {
    echo -en "$UP_ONE_LINE"
    update_prompt "$@"
}


renew_user_cert() {
    step ssh certificate --sign \
        --principal root --principal john \
        --provisioner admin \
        john@john-pc-ubuntu ~/.ssh/id_ed25519.pub
}

#
# Run Process
#

if [[ ! -e "$SSH_USER_KEY" ]]; then
    prompt_user "SSH User" "Private key missing: ${SSH_USER_KEY}. Create?"
    if [[ $REPLY =~ ^[Yy]$ ]]; then
        update_prompt $YELLOW_BANG "SSH User" "Creating private key"
        sleep 0.5
        reupdate_prompt $GREEN_CHECK "SSH User" "Created private key: ${SSH_USER_KEY}"
    fi
fi

prompt_user "SSH User" "Cert missing. Renew cert?"
if [[ $REPLY =~ ^[Yy]$ ]]; then
    # update_prompt $YELLOW_BANG "SSH User" "Renewing cert"
    # sleep 0.25
    renew_user_cert
    if [[ $? -eq 0 ]]; then
        update_prompt $GREEN_CHECK "SSH User" "Renewed cert"
    else
        update_prompt $RED_X "SSH User" "Failed to renew cert"
    fi
    echo
fi